405 Responses Need `Allow` Header

[thehabes]

RFC 9110 §15.5.6 requires Allow on a 405.

Related, on the 200 path: configureWebAnnoHeadersFor() emits Allow: GET,OPTIONS,HEAD,PUT,PATCH,DELETE,POST, advertising methods some routes reject with 405.