fix(http): don’t allow plugins to bypass a forward() call

If a “forward” hook handler returns false, execution will no longer
continue past the forward() call.

Fixes #7637