[divyanshujethi]

CodeQL CORS Hardening

Remediates CodeQL alerts #37 & #38 (\js/cors-misconfiguration-for-credentials):

• Avoids setting \Access-Control-Allow-Credentials: true\ alongside dynamic or wildcard CORS origins in \src/proxy-server.ts.
• Standardizes default fallback \Access-Control-Allow-Origin\ to *\ without credentials.

[github-actions]

👋 Thanks for opening this Pull Request, @divyanshujethi!

Thank you for contributing to SkillPrism! 🚀

Here is what happens next:

1. 🧪 Automated CI Tests: Our workflow is verifying code compilation, Biome formatting, and token benchmarks.
2. 🔍 Code Review: A maintainer from @RitualDev-Lab will review your changes shortly.
3. 🌟 Contributor Recognition: Once merged, you'll be featured on our contributors list!

💡 Tip: Make sure your commits follow Conventional Commits and tests pass locally (pnpm test).