fix(console): authenticate inference proxy

Author: fwang

infra/console.ts

@@ -283,6 +283,7 @@ new sst.cloudflare.x.SolidStart("Console", {
     ZEN_LITE_PRICE,
     new sst.Secret("ZEN_LIMITS"),
     new sst.Secret("ZEN_SESSION_SECRET"),
+    new sst.Secret("CLOUDFLARE_ACCESS_CLIENT_ID"),
     ...ZEN_MODELS,
     ...($dev
       ? [

packages/console/app/src/lib/inference-proxy.ts

@@ -81,6 +81,7 @@ export async function proxyInference(
   ])
     forwarded.headers.delete(name)
   forwarded.headers.set("authorization", `Bearer ${key}`)
+  forwarded.headers.set("CF-Access-Client-Id", Resource.CLOUDFLARE_ACCESS_CLIENT_ID.value)
   const ip = request.headers.get("cf-connecting-ip")
   if (ip) forwarded.headers.set("x-zen-ip", ip)
   const requestID = request.headers.get("x-opencode-request-id") ?? request.headers.get("x-opencode-request")