CORS middleware. And fix middleware types for logging and securityheaders.

cmd/start.go

@@ -51,12 +51,12 @@ var startCmd = &cobra.Command{
 
 		// Create middleware stack
 		stack := middleware.CreateStack(
-			middleware.Logging,                 // Log requests with structured logging
+			middleware.Logging(),               // Log requests with structured logging
 			middleware.Recovery(),              // Catch all panics
 			middleware.Timeout(32*time.Second), // Set request timeout
 			middleware.RequestID(),             // Generate a unique request ID
 			middleware.MaxBodySize(1024*1024),  // 1MB size limit
-			middleware.SecureHeaders,           // Set secure headers
+			middleware.SecureHeaders(),         // Set secure headers
 			authConfig.Middleware(),            // OIDC authentication middleware
 		)