fix(web): Set metadataBase to fix og:image URL behind reverse proxy (#908)

* fix(web): Set metadataBase to fix og:image URL behind reverse proxy

Without metadataBase, Next.js falls back to the raw HTTP request host
(localhost:8080) when constructing the absolute og:image URL from
opengraph-image.tsx. Setting metadataBase to AUTH_URL ensures the
public-facing URL is used instead.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* chore: Update CHANGELOG for #908

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: brendan-kellam

CHANGELOG.md

@@ -7,6 +7,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Fixed
+- Fixed `og:image` URL resolving to `localhost` instead of the public domain when the app is deployed behind a reverse proxy. [#908](https://github.com/sourcebot-dev/sourcebot/pull/908)
+
 ## [4.11.3] - 2026-02-19
 
 ### Fixed

packages/web/src/app/layout.tsx

@@ -11,6 +11,7 @@ import { PlanProvider } from "@/features/entitlements/planProvider";
 import { getEntitlements } from "@sourcebot/shared";
 
 export const metadata: Metadata = {
+  metadataBase: new URL(env.AUTH_URL),
   // Using the title.template will allow child pages to set the title
   // while keeping a consistent suffix.
   title: {