Unable to delete items in deployed ToDo web app for `todo-nodejs-mongo-aca` — DELETE requests blocked by CORS preflight

[Menghua1]

Describe the issue:
After deploying todo-nodejs-mongo-aca using azd up, the web app loads and items can be created, but Delete fails from the UI. The browser console shows CORS preflight errors and the DELETE request is blocked.

Repro Steps:

1. Run azd init -t todo-nodejs-mongo-aca.
2. Run azd up.
3. Open the deployed Web App URL shown by azd up.
4. Create a todo item.
5. Click Delete on the right-side details panel.

Environment:

• Template: todo-nodejs-mongo-aca.
• Azd version: azd version 1.24.0-daily.6161386 (commit 910ec77) (daily).
• OS: Windows and Codespace.
• Branch: Main.

Expected behavior:
The item/list should be deleted successfully and disappear from the UI.

@jongio for notification.