http DoH: answers include access-control-allow-origin: *

Otherwise most browsers won't allow JS from *other* sites to use the
data - one of the two primary use cases for DoH as stated in RFC 8484.
27 jobs for doh-any-origin
in 6 minutes and 3 seconds and was queued for 6 seconds