Add `Cross-Origin-Resource-Policy: cross-origin` header to content repository's thumbnail and download endpoints.