### fix: verbessere CORS-Konfiguration

- **GlobalSecurityConfig:** Füge `allowedOriginPatterns` für Subdomains von `mo-code.at` hinzu.
- **UI:** Aktualisiere Versionsmarker auf `v2026-04-23.18 - RADICAL CORS PERMISSIVENESS`.

backend/infrastructure/security/src/main/kotlin/at/mocode/infrastructure/security/GlobalSecurityConfig.kt

@@ -86,8 +86,12 @@ class GlobalSecurityConfig {
       "https://api.mo-code.at",
       "http://localhost:8080",
       "http://localhost:8083",
+      "http://localhost:8092",
       "http://localhost:4000"
     )
+    configuration.allowedOriginPatterns = listOf(
+      "https://*.mo-code.at"
+    )
     configuration.allowedMethods = listOf("GET", "POST", "PUT", "DELETE", "OPTIONS")
     configuration.allowedHeaders = listOf("*")
     configuration.allowCredentials = true