fix: Configure headers and middleware for Sanity Studio access
- Exempt /studio routes from restrictive security headers
- Remove X-Frame-Options and CSP headers for studio paths
- Add middleware to handle studio authentication flow
- Update next.config.js with route-specific header rules
This allows Sanity Studio to load properly without iframe restrictions