GHSA-g936-7jqj-mwv8: TSDProxy: Internal proxy auth token forwarded to backend services enables management API escalation

TSDProxy has a vulnerability where it forwards its internal authentication token (x-tsdproxy-auth-token) to all backend services it proxies, even when users aren't authenticated. An attacker who can run code on a backend service can steal this token and replay it to the management API from localhost, bypassing authentication entirely and gaining full control over all proxied services. This works in deployments where TSDProxy and backends run on the same machine or in shared network containers.