add dev only things

media-store/server.js

@@ -2,7 +2,7 @@ const cds = require("@sap/cds");
 
 // handle bootstrapping events...
 cds.on("bootstrap", (app) => {
-  // dev only
+  if (cds.env.env === "development") {
     app.use((req, res, next) => {
       res.header("Access-Control-Allow-Origin", "*");
       res.header(
@@ -23,7 +23,7 @@ cds.on("bootstrap", (app) => {
         next();
       }
     });
-  // add your own middleware before any by cds are added
+  }
 });
 cds.on("served", async ({ db, messaging, ...servedServices }) => {
   // add logging current user before any request