pub fn cors_layer() -> CorsLayer
CORS configuration helper Reads allowed origins from VEX_CORS_ORIGINS env var (comma-separated) Falls back to restrictive default if not set