CORS: include method PUT in Access-Control-Methods for userprefs extension

[andaaron]

CORS settings are set at controller level: https://github.com/project-zot/zot/blob/main/pkg/api/controller.go#L89
We need to allow PUT in order for the userprefs extensions to work with ZUI.