fix(extensions-library): remove wildcard CORS from continue nginx config

Removed Access-Control-Allow-Origin: * from /config.yaml and / locations.
The VS Code extension uses its own HTTP client (not browser fetch), so CORS
headers are unnecessary. The wildcard allowed any website to exfiltrate
internal LLM API URLs and server topology from config.yaml.

Closes Light-Heart-Labs#91

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: yasinBursali

resources/dev/extensions-library/services/continue/config/continue/nginx.conf

@@ -15,13 +15,11 @@ server {
     # Serve the pre-built config.yaml
     location /config.yaml {
         add_header Content-Type application/yaml;
-        add_header Access-Control-Allow-Origin *;
         try_files /config.yaml =404;
     }
 
     # Serve static assets (setup page, icons, etc.)
     location / {
         try_files $uri $uri/ /index.html;
-        add_header Access-Control-Allow-Origin *;
     }
 }