Weather CORS proxy

This Pages project proxies a small allowlist of public APIs that don't ship CORS headers, so the roof-sketch-tool's browser modules can call them.

Endpoint: GET /?target=<encoded-url>

Allowed hosts:

• www.ncdc.noaa.gov/swdiws/ — NOAA SWDI hail/wind history
• www.fema.gov/api/open/ — FEMA OpenFEMA NRI
• geocoding.geo.census.gov/ — Census Geocoder
• minedbuildings.{z5.web,blob}.core.windows.net/ — Microsoft Global Buildings

Anything off the allowlist gets a 403. To use from the tool: localStorage.setItem('cors-proxy-base', location.origin).