Split REFLEX_CORS_ALLOWED_ORIGINS by comma
Default delimiter is colon with no stripping of whitespace. However for CORS
it's much more convenient to split on a comma.
Extend the env_var interpretation system to pull a new SequenceOptions object
out of an Annotated type hint.
Fix #6066