Feature Request: Allow to change Access-Control-Allow-Origin header in callable functions

I want to specify some origins for Access-Control-Allow-Origin header in callable functions to improve security as follows.

```typescript
exports.newPost = functions
.runWith({ allowOrigins: ["https://example.com", "https://sub.example.com"] })
.onCall((data, context) => {
// ...
});
```