archweb: Allow any origin to see our .well-known redirects

Required to get .well-known working with web clients.
2 jobs for archweb-redirect-cors in 40 seconds (queued for 2 seconds)
latest