feat: add custom header support to PHT protocol

- Add Header field to PHT Client and clientConn structs
- Support custom headers in authorize, push, and pull requests
- Add metadata parsing for header configuration as map[string]string
- Enables PHT usage with header-based authentication (e.g., Cloudflare Access)

Backwards compatible - headers are optional.

internal/util/pht/client.go

@@ -21,6 +21,7 @@ type Client struct {
 	PushPath      string
 	PullPath      string
 	TLSEnabled    bool
+	Header        http.Header
 	Logger        logger.Logger
 }
 
@@ -43,6 +44,7 @@ func (c *Client) Dial(ctx context.Context, addr string) (net.Conn, error) {
 
 	cn := &clientConn{
 		client:     c.Client,
+		header:     c.Header,
 		rxc:        make(chan []byte, 128),
 		closed:     make(chan struct{}),
 		localAddr:  &net.TCPAddr{},
@@ -74,6 +76,15 @@ func (c *Client) authorize(ctx context.Context, addr string) (token string, err
 		return
 	}
 
+	// Inject custom headers
+	if c.Header != nil {
+		for k, values := range c.Header {
+			for _, v := range values {
+				r.Header.Add(k, v)
+			}
+		}
+	}
+
 	if c.Logger.IsLevelEnabled(logger.TraceLevel) {
 		dump, _ := httputil.DumpRequest(r, false)
 		c.Logger.Trace(string(dump))

internal/util/pht/conn.go

@@ -17,6 +17,7 @@ import (
 
 type clientConn struct {
 	client     *http.Client
+	header     http.Header
 	pushURL    string
 	pullURL    string
 	buf        []byte
@@ -69,6 +70,15 @@ func (c *clientConn) write(b []byte) (n int, err error) {
 		return
 	}
 
+	// Add custom headers
+	if c.header != nil {
+		for k, values := range c.header {
+			for _, v := range values {
+				req.Header.Add(k, v)
+			}
+		}
+	}
+
 	if c.logger.IsLevelEnabled(logger.TraceLevel) {
 		dump, _ := httputil.DumpRequest(req, false)
 		c.logger.Trace(string(dump))
@@ -109,6 +119,15 @@ func (c *clientConn) readLoop() {
 				return err
 			}
 
+			// Add custom headers
+			if c.header != nil {
+				for k, values := range c.header {
+					for _, v := range values {
+						r.Header.Add(k, v)
+					}
+				}
+			}
+
 			if c.logger.IsLevelEnabled(logger.TraceLevel) {
 				dump, _ := httputil.DumpRequest(r, false)
 				c.logger.Trace(string(dump))