Reproduce vite-pr-22269 from its authentic engineer request.

Reproduce vite-pr-22269 from its authentic engineer request.: a task in vite-selfbench (Harbor dataset). Fix bundled development mode so generated HMR patch files cannot be consumed as classic scripts from untrusted origins, including non-potentially-trustworthy origins where browsers omit…

The task

Fix bundled development mode so generated HMR patch files cannot be consumed as classic scripts from untrusted origins, including non-potentially-trustworthy origins where browsers omit `Sec-Fetch-*` headers. Replace the existing fetch-metadata-based blocking strategy with protection carried by the patch itself:…

Part of dari-ai/vite-selfbench.