[Backmerge-v.2.18.1][OSDEV-2341] Add Host header to fix infinite facility scroll (#871)

Backmerge PR of
#870

Forward `Host` so the origin sees the same host the viewer requested.

Without it, the ALB/app would see `origin.<env>.os-hub.net` (the
internal target) and may emit absolute links (e.g., pagination URLs)
pointing to `origin.*`, causing the next requests to bypass CloudFront
and fail.

Passing `Host` preserves the original CDN host in origin logic and
generated URLs, keeping subsequent calls on the CDN path.

Author: VadimKovalenkoSNF

deployment/terraform/cdn.tf

@@ -213,7 +213,12 @@ resource "aws_cloudfront_distribution" "cdn" {
 
       forwarded_values {
         query_string = true
-        headers      = ["Authorization", "X-OAR-CLIENT-KEY", "Referer"]
+        headers      = [
+          "Host",
+          "Authorization",
+          "X-OAR-CLIENT-KEY",
+          "Referer",
+        ]
 
         cookies {
           forward           = "whitelist"

doc/release/RELEASE-NOTES.md

@@ -3,6 +3,22 @@ All notable changes to this project will be documented in this file.
 
 This project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html). The format is based on the `RELEASE-NOTES-TEMPLATE.md` file.
 
+
+## Release 2.18.1
+
+## Introduction
+* Product name: Open Supply Hub
+* Release date: January 22, 2026
+
+### Bugfix
+[Hotfix][OSDEV-2328](https://opensupplyhub.atlassian.net/browse/OSDEV-2328) - Hotfix: Add `Host` header to fix infinite production locations scroll on the main search page.
+
+### Release instructions
+* Ensure that the following commands are included in the `post_deployment` command:
+    * `migrate`
+    * `reindex_database`
+
+
 ## Release 2.18.0
 
 ## Introduction