docs: add environment variable documentation for allowed origins
- Document NEXT_ALLOWED_DEV_ORIGINS for allowedDevOrigins
- Document NEXT_SERVER_ACTIONS_ALLOWED_ORIGINS for serverActions.allowedOrigins
- Explain that env vars are merged with config file values
- Add usage examples for both environment variables