forked from Rockachopa/Timmy-time-dashboard
validate_startup() now exits with an error if CORS_ORIGINS contains a wildcard '*' in production mode, matching the runtime stripping already done in _get_cors_origins(). Fixes #472 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>