[Config] CORS misconfigurations

[emmanuelgautier]

Description

Detect permissive or incorrectly validated CORS configurations.

Checks to implement

• Wildcard Access-Control-Allow-Origin
• Origin reflected without validation
• null origin accepted
• Wildcard + credentials (invalid but accepted)
• Weak suffix / regex matching

Tier rationale

Single-request origin-reflection probing.