How a Duplicate `proxy_set_header Host` Caused an Nginx 400 Bad Request

I recently hit an Nginx 400 Bad Request while routing selected production traffic to a pre-production backend. The setup was roughly: Client | v CDN / Load Balancer | v Production Nginx |