(needed since we have freedom.rc3.io and future.rc3.io — seems the easiest solution, at least)
Allow cors, so that the about:future cluster site can fetch its content from a codimd pad (which is currently a preview at https://stuebinm.4future.dev/about-future-website/ but will be moved to a better position once there's a domain for that).