Host Routing Without Localhost Lies

Use the shared URL defaults to derive public origins per surface instead of hardcoding localhost or production-only URLs.

Host-aware services stay honest in staging by serving the same logical surfaces under *.localhost domains.

This keeps browser smoke meaningful and avoids fake prod links in prelaunch environments.