**Description**

Enabled list of cors headers origin allowed

**Use case / motivation**

I'm currently developping Django application working with apache airflow for some external work through api. From Django, user run dag and a js request wait for dag end. By this way, I enabled cors headers in airflow.cfg with correct url. But now, I've  environment (dev & prod). It could be useful to be able to set more than one url in airflow.cfg cors header origin allowed

Thank's in advance :) 

airflow/configuration.py
return f'{self.ENV_VAR_PREFIX}{section.upper()}__{key.upper()}'
    def _get_env_var_option(self, section, key):
        
        env_var = self._env_var_name(section, key)
        if env_var in os.environ:
            return expand_env_var(os.environ[env_var])
        
        env_var_cmd = env_var + '_CMD'
        if env_var_cmd in os.environ:
            
            if (section, key) in self.sensitive_config_values:
                return run_command(os.environ[env_var_cmd])
        
        env_var_secret_path = env_var + '_SECRET'
        if env_var_secret_path in os.environ:
            
            if (section, key) in self.sensitive_config_values:
                return _get_config_value_from_secret_backend(os.environ[env_var_secret_path])
        return None
    def _get_cmd_option(self, section, key):
        fallback_key = key + '_cmd'
        
        if (section, key) in self.sensitive_config_values:
            if super().has_option(section, fallback_key):
                command = super().get(section, fallback_key)
                return run_command(command)
        return None
    def _get_secret_option(self, section, key):