### Elasticsearch Version

8.3

### Installed Plugins

_No response_

### Java Version

_bundled_

### OS Version

any

### Problem Description

Calling POST _features/_reset should reset all system indices, provided the user calling the API has a 'superuser' role or at least cluster 'manage' role.

However, the code that handles calling the individual system index reset operations isn't properly passing the ORIGIN header value, therefore many of the system index reset operations are rejected. 

### Steps to Reproduce

Simplest way to reproduce is to add a security role of any kind, causing the security index to be created and then attempt to call POST _features/_reset with a superuser.

### Logs (if relevant)

_No response_
x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/LocalStateCompositeXPackPlugin.java
ShutdownAwarePlugin,
        RestInterceptorActionPlugin {
    private XPackLicenseState licenseState;
    private SSLService sslService;
    private LicenseService licenseService;
    private LongSupplier epochMillisSupplier;
    protected List<Plugin> plugins = new ArrayList<>();
    public LocalStateCompositeXPackPlugin(final Settings settings, final Path configPath) {
        super(settings);
    }
    
    @Override
    protected SSLService getSslService() {
        return sslService;
    }
    @Override
    protected void setSslService(SSLService sslService) {
        this.sslService = sslService;
    }
    @Override
    protected LicenseService getLicenseService() {
        return licenseService;
    }
    @Override
    protected void setLicenseService(LicenseService licenseService) {
        this.licenseService = licenseService;
    }
    @Override
    protected XPackLicenseState getLicenseState() {
        return licenseState;