chore_cors_credentials_origin_hardening: guard allow_credentials against over-broad origins

[github-actions]

Problem

guard allow_credentials against over-broad origins

(Auto-created by reconcile-tracking-issues from the planned-feature folder — the
idea.md is the source of detail; run /idea-preflight to verify claims against the
current tree before execution.)

Status

• Stage: IDEA
• Priority: Backlog

Definition of done

• See the acceptance criteria in the linked idea.md (backfill this checklist at the SPEC stage).

Artifacts

• Idea: docs/00_overview/planned_features/04_ga/chore_cors_credentials_origin_hardening/idea.md

How to execute

Run /idea-preflight, then /pipeline docs/00_overview/planned_features/04_ga/chore_cors_credentials_origin_hardening --auto.