bfa66d8102
Re-enables the direct-then-FS approach removed earlier due to TLS fingerprint mismatch. With FS sessions configured, the fallback path is fast after the first request per domain (Chrome caches cf_clearance). Non-Cloudflare sites still benefit from direct HTTP speed.