Fix(framework): http cors middleware order and options (#11765)

FIXES SUP-1101
also fixes https://github.com/medusajs/medusa/issues/11743

**What**
The store cors is currently applied after the ensure publishable API key middleware, in this pr the order is fixed and the cors will be applied first.

.changeset/odd-cycles-destroy.md

@@ -0,0 +1,5 @@
+---
+"@medusajs/framework": patch
+---
+
+Fix(framework): http cors middleware order and options