CORS header for staging urls

[tyleryy]

api gateway CORS headers only are set for prod, dev, and local urls but not the dynamically changing staging urls for each PR. Need a catch-all url for these 😸