restrict /api/graphql access only to graphcdn and host

[saihaj]

Publicly users shouldn't be able to request /api/graphql rather they should use the graphcdn endpoint https://scribedao.graphcdn.app so we can use all the benefits form that service. This endpoint should only be used for portal itself (host) or GraphCDN