The CORS policy here is permissive by default- May we should allow it to be configurable and for development mode restrict to localhost / certain IP range ?mcp/core/Azure.Mcp.Core/src/Areas/Server/Commands/ServiceStartCommand.cs at f22d0f621d605a2e9ab19b8…