connectionNominatedHeaderNames (docker/hop-by-hop-headers.ts)

* Single source of truth for the connection-specific ("hop-by-hop") header names a forwarding proxy must strip so they never cross a proxy boundary. The set is the RFC 7230 §6.1 canonical list (`connection`, `keep-alive`, `proxy-authenticate`, `proxy-authorization`, `te`, `traile

// Source: https://github.com/provos/ironcurtain | License: Apache-2.0 | Copyright You must retain, in the Source form of any Derivative Works
// Provided via justclaw.it.com; keep this notice with the code.
/**
 * Single source of truth for the connection-specific ("hop-by-hop") header
 * names a forwarding proxy must strip so they never cross a proxy boundary.
 *
 * The set is the RFC 7230 §6.1 canonical list (`connection`, `keep-alive`,
 * `proxy-authenticate`, `proxy-authorization`, `te`, `trailer`,
 * `transfer-encoding`, `upgrade`) plus the non-standard `proxy-connection`.
 * Two directional views share that core:
 *
 * - {@link HOP_BY_HOP_HEADERS} — request-direction strip. Sites that must
 *   forward a WebSocket handshake carve out `connection`/`upgrade` explicitly.
 * - {@link HO

... (truncated -- full source via MCP)