Fixes overlapping X-Forwarded-Prefix for chained path filters [server mvc]

[garvit-joshi]

Fixes gh-4237

When a Server MVC route applies more than one path-mutating filter (e.g. StripPrefix=1 twice), every filter function adds a snapshot of the request URL to MvcUtils.GATEWAY_ORIGINAL_REQUEST_URL_ATTR, and XForwardedRequestHeadersFilter emitted one X-Forwarded-Prefix value per suffix-matching snapshot. For a request to /tenant/api/blue stripped to /blue, the downstream request carried:

X-Forwarded-Prefix: /tenant/api,/api

Downstream forwarded-header processing concatenates comma-separated prefix values, so the downstream application reconstructs a wrong context path (/tenant/api/api instead of /tenant/api).

With this change the prefix is derived once, from the URL as received from the client (the first entry of the attribute, which is insertion-ordered) against the final routed path. A single gateway therefore contributes a single prefix value. Values appended by upstream proxies are still preserved, covered by a new test asserting /upstream,/tenant/api.

This is the Server MVC counterpart of gh-4236 (WebFlux), which is fixed separately so each module can be reviewed and backported independently.

[garvit-joshi]

Additional context on why the duplicate X-Forwarded-Prefix values cause an incorrect downstream context path:

A comma in an HTTP field represents a list separator; it does not itself mean path concatenation. X-Forwarded-Prefix is a non-standard header, so its interpretation is implementation-specific.

Spring MVC performs the concatenation in ForwardedHeaderFilter.ForwardedPrefixExtractor#initForwardedPrefix. It splits the header on commas and appends every prefix:

String[] rawPrefixes = StringUtils.tokenizeToStringArray(result, ",");
for (String rawPrefix : rawPrefixes) {
	// trailing slash handling omitted
	prefix.append(rawPrefix);
}

Source: https://github.com/spring-projects/spring-framework/blob/v7.0.3/spring-web/src/main/java/org/springframework/web/filter/ForwardedHeaderFilter.java#L395-L415

Therefore:

X-Forwarded-Prefix: /tenant/api,/api

is interpreted as:

/tenant/api + /api = /tenant/api/api

The second /api is not a prefix contributed by another proxy; it is an intermediate URL snapshot produced by the second path-mutating filter in the same gateway. This change correctly makes the gateway contribute its complete prefix once (/tenant/api), while still preserving a legitimate upstream value such as /upstream,/tenant/api.