backport: Fix RPC cors issue of preflight request

[chenyukang]

What problem does this PR solve?

Because current default cors setting, if we send request from browser console, we met this issue:

Access to fetch at 'http://127.0.0.1:8114/' from origin 'null' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. If an opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS disabled.

Problem Summary:

What is changed and how it works?

• Add CorsLayer::permissive() for a permissive setting for cors.
• Add keep-alive by the way, our current setting is set keep-alive when websockets is enabled, we should set it by default.

What's Changed:

Related changes

• PR to update owner/repo:
• Need to cherry-pick to the release branch

Check List

Tests

• Unit test
• Integration test
• Manual test (add detailed scripts or steps below)
• No code ci-runs-only: [ quick_checks,linters ]

Side effects

• Performance regression
• Breaking backward compatibility

Release note

Title Only: Include only the PR title in the release note.