The auth handler uses Fastify's onRequest hook with reply.hijack(),
which bypasses all NestJS middleware including CORS. Manually set
Access-Control-Allow-* headers on the raw response and handle OPTIONS
preflight before delegating to BetterAuth's node handler.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>