dsh-relay is running.

GET /api/fetch?url=<urlencoded>&token=<TOKEN>
  → returns the upstream body; upstream status in x-proxy-status header

GET /api/fetch?url=<...>&token=<TOKEN>&ua=<user-agent>
  → override the outbound User-Agent