fix(api): route tenants through origin gateway

src/app/app.config.ts

@@ -12,6 +12,7 @@ import { adminAuthHeadersInterceptor, Ed25519VerificationService, NoopEd25519Ver
 import { provideServiceWorker } from '@angular/service-worker';
 import { MediaRepository } from './core/media/media-repository';
 import { MockMediaRepository } from './core/media/mock-media-repository.service';
+import { ApiConfigService } from './core/config/api-config.service';
 import { environment } from '../environments/environment';
 
 export const appConfig: ApplicationConfig = {
@@ -27,7 +28,11 @@ export const appConfig: ApplicationConfig = {
       // other interceptor has run, and normalizes whatever actually came back.
       withInterceptors([mockDataInterceptor, apiBaseUrlInterceptor, apiHeadersInterceptor, adminAuthHeadersInterceptor, cacheInterceptor, apiErrorInterceptor])
     ),
-    { provide: AUTH_API_URL, useValue: environment.authApiUrl },
+    {
+      provide: AUTH_API_URL,
+      useFactory: (apiConfig: ApiConfigService) => apiConfig.getBaseUrl(),
+      deps: [ApiConfigService]
+    },
     { provide: TELEGRAM_BOT_USERNAME, useValue: environment.telegramBot },
     // useFactory, not useClass: @marketplaces/auth ships plain tsc output, not
     // Angular Package Format, so it carries no baked-in Ivy DI metadata for