Restrict Flask-CORS to frontend domain

[Muskankr]

Fixes #264

Changes:

• Added flask-cors to requirements.txt.
• Restricted CORS configuration in backend/init.py to the deployed frontend domain.
• Prevents wildcard (*) exposure.

Result:
Only the intended frontend can call the API, reducing security risks from arbitrary origins.