chore(proxy): drop verbose CORS comments

Author: waleedlatif1

apps/sim/proxy.ts

@@ -215,16 +215,11 @@ function handleSecurityFiltering(request: NextRequest): NextResponse | null {
 export async function proxy(request: NextRequest) {
   const url = request.nextUrl
 
-  // /api/* short-circuits before handleSecurityFiltering — UA filtering was
-  // never applied to API routes under the prior matcher, and webhook/MCP
-  // exemptions in handleSecurityFiltering exist for non-API paths under /.
   if (url.pathname.startsWith('/api/')) {
     const policy = resolveApiCorsPolicy(request)
     if (request.method === 'OPTIONS') {
       return buildPreflightResponse(policy)
     }
-    // Form routes reflect origin via addCorsHeaders in the route handler;
-    // skip middleware CORS here so the same header isn't written twice.
     if (url.pathname === '/api/form' || url.pathname.startsWith('/api/form/')) {
       return NextResponse.next()
     }