fix: Add missing allowlist config for cursor apis, closes #5207

[FabianLars]

Should the changefile include a patch for cli.js/cli.rs too?

p.s. i didn't test if this completely fixes it because i currently can't install the cli locally for whatever reason.

What kind of change does this PR introduce?

• Bugfix
• Feature
• Docs
• New Binding issue #___
• Code style update
• Refactor
• Build-related changes
• Other, please describe:

Does this PR introduce a breaking change?

• Yes, and the changes were approved in issue #___
• No

Checklist

• When resolving issues, they are referenced in the PR's title (e.g fix: remove a typo, closes #___, #___)
• A change file is added if any packages will require a version bump due to this PR per the instructions in the readme.
• I have added a convincing reason for adding this feature, if necessary