Add CORP header to esbuild.ts

This allows the dev server to be embedded into other web pages as an
iframe when they have cross-origin-embedder-policy: require-corp.

src/esbuild.ts

@@ -91,6 +91,7 @@ if (serve) {
                     ...proxyRes.headers,
                     'cross-origin-opener-policy': 'same-origin',
                     'cross-origin-embedder-policy': 'require-corp',
+                    'cross-origin-resource-policy': 'cross-origin',
                   });
                   proxyRes.pipe(res, { end: true });
                 }