Multi-region HTTP CONNECT proxy in Go on AWS (Terraform), hardened as an egress gateway: SSRF and metadata blocking, DNS rebinding guard.