An HTTP/3 rollout succeeds and signed origin requests fail

Connectivity is fine, yet origin auth breaks because one protocol path signs a normalized authority value and the other does not.