[KEYCLOAK-9045] Add CORS headers on proxied upstream responses (#441)

* fixes #9045
* enables CORS debug logging with Verbose option
* Fix possible conflict with upstream serving CORS
* Revert on optionality of sending headers to upstream

Signed-off-by: Frederic BIDON <frederic@oneconcern.com>