The CORS middleware was incorrectly referencing `webapp-cors` for the `accessControlAllowCredentials` header, which should use `complex-cors` to match the actual middleware name. Also removed a commented-out TLS certresolver line that was no longer needed.
Updated the connection string environment variable from `ConnectionStrings__Default` to `ConnectionStrings__ComplexConnection` to align with the application's expected configuration key.
