pub fn real_ip_from_trusted_headers( headers: &HeaderMap, peer: IpAddr, trusted: &[IpNet], ) -> IpAddr
Resolves a client IP using parsed trusted proxies. Invalid forwarded values fall back to peer.