feat: allow more customization of cors

Also the default cors allowed origins is now "*"
Users must override to narrow the origins :

eg :
jelu:
  cors:
    allowed-origins:
      - https://jelu.domain1.org
      - https://jelu.domain2.com

src/main/kotlin/io/github/bayang/jelu/config/GlobalConfig.kt

@@ -40,7 +40,7 @@ class GlobalConfig {
             registerCorsConfiguration(
                 "/**",
                 CorsConfiguration().applyPermitDefaultValues().apply {
-                    allowedOrigins = if (jeluProperties.cors.allowedOrigins.isNullOrEmpty()) null else jeluProperties.cors.allowedOrigins
+                    allowedOriginPatterns = if (jeluProperties.cors.allowedOrigins.isNullOrEmpty()) listOf("*") else jeluProperties.cors.allowedOrigins
                     allowedMethods = HttpMethod.values().map { it.name }
                     allowCredentials = true
                     addExposedHeader(HttpHeaders.CONTENT_DISPOSITION)