Synced from: PurposePath_Api@5f2f1375

Original commit: Merge pull request #700 from mottych/hotfix/issue-

Original author: Motty Chen

Branch: master

[skip ci]

Ensure browser preflight requests always return CORS headers by configuring API Gateway for allowed frontend origins and relaxing app-level allowed headers. Add a stronger production smoke test that validates all purposepath.app frontend origins and common tracing headers to prevent regressions.

Made-with: Cursor

Add the coaching Pulumi preprod stack configuration file with AWS region so future hotfix branches can deploy to preprod without manual stack config setup.

Made-with: Cursor

fix(cors): restore preprod and production preflight handling

Support production deploys from merged hotfix PRs, add an automatic hotfix-to-preprod deployment workflow, and fail fast when Lambda is not Active after deploy. Stop managing the shared ECR repository from the coaching service stack to prevent image churn breaking Lambda.

Made-with: Cursor

fix(deploy): harden hotfix promotion reliability

Run Lambda state validation from the Pulumi project directory and poll until the function reaches Active with a successful update status. This prevents false failures and correctly blocks only unhealthy production deploys.

Made-with: Cursor

fix(ci): stabilize production lambda runtime verification

Add a dedicated Cursor command for production incident handling that mirrors resolve-issue principles while enforcing the hotfix path: preprod validation, hotfix-to-master promotion, and mandatory downstream merges to staging and dev.

Made-with: Cursor

docs: add resolve-production-issue command workflow