FileResponse does not properly include CORS headers when served from
a different origin. This fix manually adds the Access-Control-Allow-Origin
header based on the request origin.
Fixes CORS policy errors when accessing symbol files from frontend
applications running on localhost:4200 or other origins.