fix(wujie): add boundary check for URL rewrite to prevent path escape

[Gaubee]

Problem

When a request's origin matches the target origin but the path is outside the target base path, it could cause path escape issues.

Fix

Added boundary check:

if (normalized.origin === targetBase.origin && normalized.href.startsWith(targetBaseHref) === false) {
  normalized = new URL(normalized.href.replace(normalized.origin, ''), PLACEHOLDER_ORIGIN);
}

This ensures requests that would escape the miniapp's base path are properly rewritten back.