fix: add ORIGIN environment variable for SvelteKit to prevent internal IP/port usage

docker-compose.prod.yml

@@ -365,6 +365,8 @@ services:
       - KEYCLOAK_REALM=${KEYCLOAK_REALM:-master}
       - KEYCLOAK_CLIENT_ID=${KEYCLOAK_CLIENT_ID:-anexo76-backend}
       - KEYCLOAK_CLIENT_SECRET=${KEYCLOAK_CLIENT_SECRET:-dev-secret}
+      # SvelteKit ORIGIN — evita que request.url.origin use la IP/puerto interno del contenedor
+      - ORIGIN=${ORIGIN:-https://anexo76-dev.aduanasoft.com}
     ports:
       - "5111:5173"
     depends_on:

docker-compose.yml

@@ -142,6 +142,8 @@ services:
       # CORS / CSRF — trusted origins para svelte.config.js
       - CORS_ORIGINS=${CORS_ORIGINS:-http://localhost:5173,http://localhost:3001}
       - TRUSTED_ORIGINS=${TRUSTED_ORIGINS:-}
+      # SvelteKit ORIGIN — evita que request.url.origin use la IP/puerto interno del contenedor
+      - ORIGIN=${ORIGIN:-http://localhost:5173}
     ports:
       - "5173:5173"
     depends_on: