Streamable HTTP server wrapper: Fix CORS for browser clients (missing handlers, missing headers on error paths, and Mcp-Session-Id not exposed)

Streamable HTTP server wrapper: Fix CORS for browser clients (missing handlers, missing headers on error paths, and Mcp-Session-Id not exposed) #150