cors: add headers to allow the YouTube embed wrapper to be displayed in an iframe

cors-proxy/src/index.ts

@@ -218,6 +218,8 @@ const server = Bun.serve({
         status: 200,
         headers: {
           "Content-Type": "text/html; charset=utf-8",
+          "Content-Security-Policy": "frame-ancestors *",
+          "X-Frame-Options": "ALLOWALL",
         },
       });
     }