Fix CORS configuration.

We need to configure this always, but limit the allowed origins for non-
dev modes.

https://github.com/dcs-liberation/dcs_liberation/issues/2039

game/server/app.py

@@ -37,10 +37,14 @@ app.include_router(tgos.router)
 app.include_router(waypoints.router)
 
 
+origins = []
 if ServerSettings.get().cors_allow_debug_server:
+    origins.append("http://localhost:3000")
+
+
 app.add_middleware(
     CORSMiddleware,
-        allow_origins=["http://localhost:3000"],
+    allow_origins=origins,
     allow_methods=["*"],
     allow_headers=["*"],
 )