fix(router): remove originAccessControlConfig for HTTP origins to prevent 502

When router.route() receives an http:// URL, the CloudFront Function
deletes customOriginConfig to inherit the placeholder's http-only
config. However, the remaining originAccessControlConfig: { enabled: false }
prevents CloudFront from correctly inheriting, causing it to default to
HTTPS:443 — which fails with 502 if the origin only listens on HTTP:80.

Fix: also delete originAccessControlConfig when protocol is "http".
The override.originAccessControlConfig check below still allows
OAC-enabled origins (protection: "oac") to re-add it explicitly.

Fixes #6742

Made-with: Cursor

Author: turisanapo

platform/src/components/aws/router.ts

@@ -2966,6 +2966,7 @@ function setUrlOrigin(urlHost, override) {
   override = override ?? {};
   if (override.protocol === "http") {
     delete origin.customOriginConfig;
+    delete origin.originAccessControlConfig;
   }
   if (override.connectionAttempts) {
     origin.connectionAttempts = override.connectionAttempts;