[Task]: Add CORS to All APIs Policy

[simonkurtz-MSFT]

Describe the task

While not immediately necessary for our samples, we should have CORS built into the All APIs / global scope, so that users can ascertain where to set up their respective CORS settings.

https://learn.microsoft.com/en-us/azure/api-management/cors-policy