Document CORS support for web API services #53

Scope

Add section to security/web-services.md covering config-driven CORS support:

• <cors> element in Spe.config
• Per-service configuration (remoting, RESTful, file/media endpoints)
• Allowed origins, credentials support
• Example config patches

Add cross-link from remoting.md to the CORS section for discoverability. Mark as "Introduced in SPE 9.0".

References

• Add configurable CORS support for web API services Console#1422

Files

• security/web-services.md
• remoting.md