Restore CorsWebFilter and add backofficeCircuitBreaker timeout
- Restored
CorsWebFilterbean inCorsConfigwithX-Correlation-Idadded to allowed headers, ensuring explicit CORS handling at the filter level for all cross-origin requests. - Added
backofficeCircuitBreakertimelimiter (timeoutDuration: 15s) inapplication.ymlto account for Keycloak cold-start latency during admin user creation flows.