- Add matrix_frontend_url setting to config.py (default: empty/disabled)
- Update _get_cors_origins() to include matrix_frontend_url when set
- Add allow_origin_regex for Tailscale IPs (100.x.x.x pattern)
- Existing CORS behavior unchanged when matrix_frontend_url is empty
Fixes#679