Fix CORS duplication and align KYC routing in gateway
Removed the custom CORS filter and kept a single CORS source via spring.cloud.gateway.globalcors. Added PATCH to CORS allowed methods. Updated gateway routing to forward the real KYC API paths under /api/v1/... to the KYC service.