* feat(admin): update runtime CORS origins consistently * test(admin): preserve rate-limit headers after CORS updates * test(admin): preserve router connection budget after rebase