fix: Add global OPTIONS route for CORS preflight handling

public/index.php

@@ -19,6 +19,11 @@ AppConfig::loadEnv(__DIR__ . '/..');
 // Bootstrap application
 $app = AppBootstrap::create();
 
+// Global OPTIONS route for CORS preflight (must be before other routes)
+$app->options('/{routes:.+}', function ($request, $response) {
+    return $response->withStatus(204);
+});
+
 // Root route - redirect to docs
 $app->get('/', function ($request, $response) {
     return $response