CORS, Health check, Stay on HTTP

[otheec]

No description provided.

[Copilot]

Pull Request Overview

This PR configures the API for containerized deployment by adding health checks, relaxing CORS policy, and disabling HTTPS redirection for HTTP-only container environments.

• Added health check endpoint for container orchestration monitoring
• Changed CORS policy from localhost-only to allow any origin
• Disabled HTTPS redirection with explanatory comment for container compatibility

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[Copilot]

Using AllowAnyOrigin() creates a security vulnerability by allowing requests from any domain. This should be restricted to specific trusted origins, especially in production environments. Consider using WithOrigins() with a configurable list of allowed domains.

[Copilot]

Disabling HTTPS redirection removes an important security layer. Consider implementing HTTPS termination at the reverse proxy/load balancer level instead of disabling it entirely, or use environment-based configuration to conditionally enable HTTPS redirection.

Suggested change

	//app.UseHttpsRedirection(); turned off because the container is http only
	// Conditionally enable HTTPS redirection based on configuration
	if (builder.Configuration.GetValue<bool>("EnableHttpsRedirection"))
	{
	app.UseHttpsRedirection();
	}