fix(configuration): CORS docs, allow_origins and allow_headers

[larme]

What does this PR address?

• The CORS configuration naming mistake in docs
• deprecate access_control_ allow_origin, use access_control_allow_origins instead
• access_control_allow_origins and access_control_allow_headers should be converted to list when passed to starlette's CORSMiddleware
• more test cases to cover origin mismatch

Before submitting:

• Does the Pull Request follow Conventional Commits specification naming? Here are GitHub's
  guide on how to create a pull request.
• Does the code follow BentoML's code style, both make format and make lint script have passed (instructions)?
• Did you read through contribution guidelines and follow development guidelines?
• Did your changes require updates to the documentation? Have you updated
  those accordingly? Here are documentation guidelines and tips on writting docs.
• Did you write tests to cover your changes?

[codecov]

Codecov Report

Merging #3643 (1ef77f6) into main (f66cdbd) will decrease coverage by 0.02%.
The diff coverage is 0.00%.

@@            Coverage Diff             @@
##             main    #3643      +/-   ##
==========================================
- Coverage   31.86%   31.85%   -0.02%     
==========================================
  Files         146      146              
  Lines       12027    12032       +5     
  Branches     1985     1987       +2     
==========================================
  Hits         3833     3833              
- Misses       7919     7924       +5     
  Partials      275      275              

Impacted Files	Coverage Δ
src/bentoml/_internal/configuration/containers.py	47.57% <0.00%> (-0.86%)	⬇️
src/bentoml/_internal/configuration/v1/__init__.py	47.72% <0.00%> (-1.11%)	⬇️

[aarnphm]

LGTM