Resolves (functionUrl, authHeaders) for a POST to the ai-proxy
Edge Function using the currently active Supabase session. Returns null
when the user isn't signed in. Extracted from listModelsViaProxy so the
Supabase singleton access is isolated from the parsing/HTTP logic, which
is unit-testable on its own.