Update CORS configuration to include production URLs

Add Vercel and Hugging Face deployment URLs to allowed CORS origins to enable frontend access from production environments.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

.env.example

@@ -11,7 +11,7 @@ JWT_EXPIRATION_HOURS=168
 BETTER_AUTH_SECRET=3gHSWlEDitVGXMw9B9d1YcXriLhyxltr
 
 # CORS Configuration
-CORS_ORIGINS=http://localhost:3000,http://127.0.0.1:3000
+CORS_ORIGINS=http://localhost:3000,http://127.0.0.1:3000,https://bilal-taskflow-fullstack.vercel.app,https://bilalcode-taskflow.hf.space
 
 # Environment
 ENVIRONMENT=development