chore(kyc): remove local CORS config to rely on gateway )
Remove KYC local CORS to rely on API Gateway
Removed the local CORS configuration in the KYC service to prevent duplicated CORS headers when requests go through the API Gateway.
Browsers reject responses when Access-Control-Allow-Origin is present multiple times (or as a comma-separated duplicate). CORS should be handled in a single place (the gateway) for consistent behavior.
Test plan Start gateway + KYC service From the frontend, call POST /api/v1/investors/me/kyc via the gateway and confirm no CORS errors in DevTools.