add CORS headers on archive endpoint

https://github.com/juju/charmstore/issues/146
Please add a comment which explains why we're doing this, for the
sake of www dummies like me. Preferably with a link to a definitive
reference on the matter.