CORS middleware: `origin` should be optional

Currently `origin` is a required member of `CORSOptions`, but according to [the documentation](https://hono.dev/docs/middleware/builtin/cors#origin-string-string-origin-string-c-context-string) and the fact that it has default value, it should be optional.