[WIP] Fix CORS issues and service authorization necessity

[Copilot]

• Review current CORS configuration
• Determine if Authorization header is needed (service has no auth)
• Update CORS configuration to remove unnecessary Authorization header
• Keep only essential headers like Content-Type for standard CORS compliance
• Test changes - all tests pass
• Reply to comment with findings and commit hash

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.