If I’m reading the error right, I think you’re doing an AJAX request FROM staffdev.{redacted}.com TO staffforumdev.{redacted}.com. Therefore you need to modify Discourse to allow requests from staffdev.
I believe that should be as simple as adding staffdev to the “allowed embed” list in the admin panel at /admin/customize/embedding