1688 OAuth proxy on Jushita. Allowed: /api/oauth/1688/callback, /api/push/1688/*, /api/webhooks/1688/*, /openapi/* (egress)