improve api gateway cors

[raylrui]

Summary

Resolve issue #246

Make OrcaBusApiGateway CORS configuration more extensible for service-specific API requirements.

This PR adds:

• optional corsAllowHeaders
• optional corsExposeHeaders
• PUT to the default CORS allowed methods

Changes

• Added corsAllowHeaders?: string[] to OrcaBusApiGatewayProps
• Added corsExposeHeaders?: string[] to OrcaBusApiGatewayProps
• Appended props.corsAllowHeaders to the default CORS allowHeaders
• Added CorsHttpMethod.PUT to default CORS allowMethods
• Passed props.corsExposeHeaders to corsPreflight.exposeHeaders

Compatibility

Existing services keep the same default CORS behavior unless they opt in to the new props.

corsAllowOrigins behavior is unchanged.

[Copilot]

Pull request overview

This PR updates the OrcaBusApiGateway construct to make API Gateway HTTP API CORS configuration more extensible, addressing #246 while preserving existing default behavior unless consumers opt in.

Changes:

• Added optional corsAllowHeaders?: string[] and corsExposeHeaders?: string[] to OrcaBusApiGatewayProps.
• Extended the default CORS configuration to include PUT and to append any additional allowed request headers.
• Wired corsExposeHeaders through to corsPreflight.exposeHeaders and updated generated docs accordingly.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File	Description
packages/api-gateway/api-gateway.ts	Adds new optional CORS props and applies them to HttpApi CORS preflight config (extra allow headers, PUT method, expose headers).
packages/docs/@orcabus/namespaces/apigateway/interfaces/OrcaBusApiGatewayProps.md	Updates generated interface docs to include the two new optional CORS props.
packages/docs/@orcabus/namespaces/apigateway/classes/OrcaBusApiGateway.md	Updates generated class docs to reflect source line shifts from the code change.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.