EZP-22139: require nelmio/cors-bundle: dev-master

Mirroring of https://github.com/ezsystems/ezpublish-community/pull/93.