Function validate_room_create_host 

pub fn validate_room_create_host(
    payload: &RoomCreatePayload,
    host_origin: &str,
) -> Result<()>

Host binding check (Section 8.1): host must be the receiving host’s API origin.