Merge pull request 'fix(cors): wing.gc-si.dev CORS 허용 (application.yml + SecurityConfig)' (#13) from develop into main

Reviewed-on: #13

src/main/resources/application.yml

@@ -27,9 +27,15 @@ app:
     expiration-ms: ${JWT_EXPIRATION:86400000}  # 24시간
   google:
     client-id: ${GOOGLE_CLIENT_ID:}
-  allowed-email-domain: gcsc.co.kr
+    # Optional: allow multiple audiences (comma-separated) for shared auth across multiple frontends.
+    client-ids: ${GOOGLE_CLIENT_IDS:${GOOGLE_CLIENT_ID:}}
+  allowed-email-domain: ${ALLOWED_EMAIL_DOMAIN:gcsc.co.kr}
+  wing:
+    ais:
+      upstream-base: ${WING_AIS_UPSTREAM_BASE:http://211.208.115.83:8041}
+      timeout-ms: ${WING_AIS_TIMEOUT_MS:20000}
   cors:
-    allowed-origins: ${CORS_ORIGINS:http://localhost:5173,https://guide.gc-si.dev}
+    allowed-origins: ${CORS_ORIGINS:http://localhost:5173,http://localhost:5175,http://127.0.0.1:5175,https://guide.gc-si.dev,https://wing.gc-si.dev}
 
 # SpringDoc / Swagger
 springdoc: