feat: hot-reload CORS origins

[zepatrik]

needs ory/x#713

With this PR, CORS allowed-origins will be hot-reloadable. Is there a good place to put an integration test? Only e2e I guess?

[aeneasr]

Only e2e I guess?

You can start the server and make an HTTP request to an endpoint with HEAD and the Origin: Header and expect to see correct Cross-Origin-* headers.

[aeneasr]

LGTM please verify that empty domains != allow all domains.

[zepatrik]

Manual testing confirmed it works.

[zepatrik]

Tests are failing because of ory/x bump which does not work on mysql thanks to gobuffalo/pop#829

[codecov]

Codecov Report

Merging #3423 (63d5faf) into master (6b02350) will decrease coverage by 0.01%.
Report is 1 commits behind head on master.
The diff coverage is 72.72%.

❗ Current head 63d5faf differs from pull request most recent head 847a6fe. Consider uploading reports for the commit 847a6fe to get more accurate results

@@            Coverage Diff             @@
##           master    #3423      +/-   ##
==========================================
- Coverage   78.02%   78.01%   -0.01%     
==========================================
  Files         327      327              
  Lines       21402    21406       +4     
==========================================
+ Hits        16698    16699       +1     
- Misses       3466     3468       +2     
- Partials     1238     1239       +1     

Files Changed	Coverage Δ
cmd/daemon/serve.go	88.05% <70.00%> (-1.34%)	⬇️
driver/config/config.go	82.62% <100.00%> (+0.02%)	⬆️