Allow cross origin requests only for message bus

Development
3

You can add extra response headers per the docs:

In e.g. config/initializers/message_bus.rb:

MessageBus.extra_response_headers_lookup do |env|
 [
    ["Access-Control-Allow-Origin", "http://example.com:3000"],
  ]
end