Proxy Herald well-known routes through Drawbridge

[macterra]

Summary

• proxy the full root namespace to Herald through Drawbridge
• widen the Herald-specific credentialed CORS scope to match the proxied well-known routes
• fix the missing root access for Herald endpoints like , , and

Closes #263

Testing

• npm run build (services/drawbridge/server)