Paperless-ngx reverse-proxy identity needs header discipline

A focused review of Paperless-ngx remote-user authentication, secret keys, and measured deployment exposure.