Add 'Authorization' to `Access-Control-Allow-Headers`

This warning appeared on Firefox:

```
Cross-Origin Request Warning: The Same Origin Policy will disallow reading the remote resource at https://admin.da.live/config/da-testautomation/ soon. (Reason: When the `Access-Control-Allow-Headers` is `*`, the `Authorization` header is not covered. To include the `Authorization` header, it must be explicitly listed in CORS header `Access-Control-Allow-Headers`).
```

Start by locating the code or configuration that produces the CORS Access-Control-Allow-Headers response for the reported admin.da.live resource. Verify how the wildcard is handled, explicitly include Authorization, and reproduce the Firefox warning to confirm it no longer appears.

Written by the indexing model from the issue text.