## What changed
- Treat an MCP server as trusted for ChatGPT authentication when its origin
matches the configured HTTPS `chatgpt-staging.com` host or one of its
subdomains.
- Continue trusting the production ChatGPT origin and falling back to OAuth for
other transports and origins.
## Testing
- Cover both the staging apex domain and a staging subdomain.
GitOrigin-RevId: 1b1d06ab214141d39eb38d46de9dfb74e6fedb3e