WIP: Move cors from macaron to chi and also apply cors to all routers from only /api

[lunny]

This maybe a break change

[codecov-io]

Codecov Report

Merging #13621 (9cbb2f4) into master (5a991ec) will decrease coverage by 0.01%.
The diff coverage is 0.00%.

@@            Coverage Diff             @@
##           master   #13621      +/-   ##
==========================================
- Coverage   42.21%   42.20%   -0.02%     
==========================================
  Files         697      697              
  Lines       76563    76561       -2     
==========================================
- Hits        32320    32310      -10     
- Misses      38945    38952       +7     
- Partials     5298     5299       +1     

Impacted Files	Coverage Δ
routers/routes/chi.go	34.33% <0.00%> (-1.52%)	⬇️
routers/routes/macaron.go	93.64% <ø> (+1.10%)	⬆️
modules/util/timer.go	42.85% <0.00%> (-42.86%)	⬇️
modules/process/manager.go	72.50% <0.00%> (-2.50%)	⬇️
modules/log/event.go	59.90% <0.00%> (-1.89%)	⬇️
modules/queue/workerpool.go	58.77% <0.00%> (-1.23%)	⬇️
services/pull/pull.go	41.27% <0.00%> (+0.49%)	⬆️

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 5a991ec...9cbb2f4. Read the comment docs.

[silverwind]

Can we maybe consolidate our CORS setting here too? We have the cors category and then there's the sole repository.ACCESS_CONTROL_ALLOW_ORIGIN which I think should be removed for clarity.

Thought it's possible those do two different things.

[lunny]

blocked by #13857

[lunny]

replaced by #14293