Fix openapi spec

[r1n04h]

Note

Configures Swagger at /swagger with static files disabled, reorders CORS hook, tweaks SPA catch‑all routing, and bumps version to 1.1.0.

• Server:
  • Swagger/OpenAPI: Configure swagger with path: '/swagger' and excludeStaticFile: true.
  • CORS: Apply CORS headers in .onAfterHandle after initializing Swagger.
  • SPA Routing: Update catch-all GET '/:username' handler and ensure it's last.
• Package:
  • Bump version in package.json to 1.1.0.

^{Written by Cursor Bugbot for commit 532b999. This will update automatically on new commits. Configure here.}