Next.js 16 proxy.ts — anyone migrated auth refresh yet?

Middleware is now proxy.ts. Supabase session refresh works the same, but here are the gotchas I hit with matchers.