Fix CORS issues

[franky47]

Somehow when deploying through GHA the CORS rule does not apply, but it does when deploying through the Surge CLI locally.. 🤷‍♀️

[franky47]

Somehow using local surge in GHA still gives no CORS. Maybe a side effect of token-based auth (only works with traditional user auth) ?