[OPIK-3502] [BE] Add opikApiKey to CORS allowed headers and bump optimizer (#4512)

* [OPIK-3502] [BE] Add opikApiKey to CORS allowed headers and bump optimizer

- Add RequestContext.OPIK_API_KEY to CORS allowed headers to enable
  local frontend testing against staging/remote backend
- Bump opik-optimizer from 2.3.6 to 2.3.9

* [OPIK-3502] [BE] Add opikApiKey to CORS allowed headers and bump optimizer

- Add RequestContext.OPIK_API_KEY to CORS allowed headers to enable
  local frontend testing against staging/remote backend
- Bump opik-optimizer from 2.3.6 to 2.3.9

Author: ldaugusto

apps/opik-backend/src/main/java/com/comet/opik/infrastructure/http/CorsFactory.java

@@ -31,7 +31,9 @@ public class CorsFactory {
             COMET_SDK_API_HEADER,
             COMET_USERNAME_HEADER,
             COMET_REACT_VER_HEADER,
-            RequestContext.WORKSPACE_HEADER);
+            RequestContext.WORKSPACE_HEADER,
+            // used by FE team to test Optimization Studio locally vs remote BE
+            RequestContext.OPIK_API_KEY);
 
     private static final Set<String> ALLOWED_METHODS = Set.of(
             HttpMethod.OPTIONS.toString(),

apps/opik-python-backend/requirements.txt

@@ -27,5 +27,5 @@ schedule==1.2.1
 tiktoken==0.9.0
 redis==6.4.0
 rq==2.6.0
-opik-optimizer==2.3.6
+opik-optimizer==2.3.9
 gepa==0.0.17