De-dup the two main frontend configs. Add two disabled pypi mirrors. Add reqidel so that x-forwarded-* is "safe".

Yes, this isn't technically needed since you can just use the last header, yes this will increase CPU load on the balancers, no I don't care anymore. With the load from PyPI being off loaded to Fastly, we can afford the overhead.