a3ca12da26
- Add CORS policy to allow frontend requests from localhost:3000 - Exempt /api/debug endpoints from tenant validation - Fix JSON parsing in realm_access claim checks