set CORS policy for R2 #photoai so I can directly load images from R2 into <canvas> instead of hack routing via main domain Cloudflare CDN, which will speed up photo loading by 3 seconds