feat(app): add CORS middleware — allow all origins for Spaces compatibility

server/app.py

@@ -1,7 +1,16 @@
 from fastapi import FastAPI
+from fastapi.middleware.cors import CORSMiddleware
 
 app = FastAPI(
     title       = "RedTeamOS",
     description = "AI Red-Teaming Environment for Safety Research",
     version     = "0.1.0",
 )
+
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins     = ["*"],
+    allow_credentials = True,
+    allow_methods     = ["*"],
+    allow_headers     = ["*"],
+)