fix CORS config: drop OPTIONS from AllowMethods (auto-handled by Lambda Function URLs)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: ryan-williams

src/deploy.ts

@@ -246,7 +246,7 @@ export async function deploy(config: CorsProxyConfig): Promise<DeployResult> {
       AuthType: "NONE",
       Cors: {
         AllowOrigins: config.cors.origins,
-        AllowMethods: ["GET", "HEAD", "OPTIONS"],
+        AllowMethods: ["GET", "HEAD"],
         MaxAge: config.cors.maxAge,
       },
     }))