* fix: tighten generic upstream passthrough headers * fix: preserve codex passthrough version headers