The console's login preview works on preview.zitadel.com again

The console's login preview works again off localhost, as on preview.zitadel.com, for a project that lists its origins: POST /flow now admits the origin the server's server.public_base names, though a step submitted from there is still refused unless the project lists it.