Per-request region pinning

A region field on the request overrides the deployment default for that call. Combined with residency: strict it will fail rather than route elsewhere, which is what you want when the data is not allowed to leave a jurisdiction.