fix(consumer): Wire findagram/findadispo to public API

- Update Dockerfiles to use cannaiq.co as API base URL
- Change findagram API client from /api/az to /api/v1 endpoints
- Add trusted origin bypass in public-api middleware for consumer sites
- Consumer sites (findagram.co, findadispo.com) can now access /api/v1
  endpoints without API key authentication

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

findadispo/frontend/Dockerfile

@@ -13,7 +13,8 @@ RUN npm install
 COPY . .
 
 # Set build-time environment variable for API URL (CRA uses REACT_APP_ prefix)
-ENV REACT_APP_API_URL=https://api.findadispo.com
+# All consumer sites use cannaiq.co/api as the backend
+ENV REACT_APP_API_URL=https://cannaiq.co
 
 # Build the app (CRA produces /build, not /dist)
 RUN npm run build