Add unit tests for CORS middleware

[todo-mdx]

TESTING: cors.ts middleware has 0% test coverage.

Location: src/middleware/cors.ts

TDD Steps:

• RED: Write tests for: default origin (*), custom origin validation, allowed methods, allowed headers, credentials handling, preflight OPTIONS requests
• GREEN: All tests should pass (implementation exists)
• REFACTOR: Add edge case tests