CIOS heartbeat failures — Origin header + 4-consumer token sync.

CIOS heartbeat failures — Origin header + 4-consumer token sync. Root cause 1 (HTTP 403): Paperclip board-mutation-guard.ts rejects Origin headers that do not match Host. For internal docker exec calls to http://localhost:3100, Origin MUST be http://localhost:3100, NOT https://paperclip.arjtech.in. Root cause 2 (HTTP 401): Session token must be full signed value (token.signature with URL-encoding) from Set-Cookie header, not short token from JSON body. 4 credential consumers must stay in sync: cios-scheduler.sh, cios-scheduler-conditional.sh, paperclip-mcp/.env, cios-notify/.env. Self-healing scheduler auto-propagates on 401 via sed -i. Diagnosis: tail /var/log/cios/sentinel.log — check HTTP code: 401=session token, 403=Origin header, 5xx=Paperclip down.