Calling external API from forge app - CORS issue and is that "from URL" changing?

CORS is one of the main blockers for us migrating a Connect app to Forge.

See here for details: