Fix compatibility_flags configuration and enhance CORS handling

- Fixed compatibility_flags format error that was preventing local testing
- Enhanced CORS headers with explicit origin validation
- Added WAF bypass variables for custom domain
- Local testing now works correctly with 204 response

Author: sshrihar

wrangler.toml

@@ -11,8 +11,6 @@ compatibility_flags = ["nodejs_compat"]
 route = "api-polygon-tokens.staging.polygon.technology/*"
 [env.staging.vars]
 CLOUDFLARE_WAF_BYPASS = "true"
-[env.staging.compatibility_flags]
-nodejs_compat = true
 
 [env.production]
 routes = [