pub(crate) fn is_local_desktop_origin(origin: &HeaderValue) -> bool
True for Tauri webview and localhost pages talking to this API.