fix(cloudflare-proxy): handle WebSocket upgrade in Worker without body/redirect

WhatsApp (Baileys) connects to web.whatsapp.com via WebSocket. The https.request
patch correctly routes this through the Cloudflare Worker, but the Worker was
forwarding the upgrade request with body + redirect:follow, causing the Worker
to tear down the TCP connection before TLS completed:

ECONNRESET: Client network socket disconnected before
secure TLS connection was established
host: <worker>.workers.dev port: 443

Cloudflare Workers natively tunnel WebSocket connections when fetch() gets a
101 Switching Protocols upstream response — but only if the request is forwarded
cleanly without a body or redirect policy. Detect Upgrade: websocket and
forward with method+headers only; all other requests keep the existing path.

Fixes: WhatsApp status 428 retry loop after ECONNRESET in HF Spaces deployments
with CLOUDFLARE_WORKERS_TOKEN set.

cloudflare-proxy-setup.py

@@ -151,15 +151,19 @@ async function handleRequest(request) {{
   headers.delete("x-target-host");
   headers.delete("x-proxy-key");
 
-  const proxiedRequest = new Request(targetUrl, {{
-    method: request.method,
-    headers,
-    body: request.body,
-    redirect: "follow",
-  }});
+  // WebSocket upgrade requests (e.g. WhatsApp via Baileys) must NOT have
+  // body or redirect set — passing them causes the Worker to drop the TCP
+  // connection before TLS completes, producing ECONNRESET on the client.
+  // Cloudflare Workers transparently tunnel WebSocket connections when fetch()
+  // receives a 101 Switching Protocols response from the upstream server.
+  const isWebSocketUpgrade = (request.headers.get("Upgrade") || "").toLowerCase() === "websocket";
+
+  const fetchInit = isWebSocketUpgrade
+    ? {{ method: request.method, headers }}
+    : {{ method: request.method, headers, body: request.body, redirect: "follow" }};
 
   try {{
-    return await fetch(proxiedRequest);
+    return await fetch(new Request(targetUrl, fetchInit));
   }} catch (error) {{
     return new Response(`Proxy Error: ${{error.message}}`, {{ status: 502 }});
   }}