Serve code for node.mytake.org from https://mytake.org

[nedtwigg]

We need very permissive CORS headers on both /api/static/fact and /api/static/search, because the code they are running comes from localhost, but it needs to hit those two APIs. But actually, that code could just as easily come from /api/node-server, and then we wouldn't need that CORS header. I don't think this is super important, but wanted to document it for the future.