feat(cli): Allow to configure access origin on cordova config.xml

[Dante1349]

Hey,

i reecognized that the access origins where hard coded here, but i wanted to restrict the access origins because we are using cordova-plugin-inappbrowser which therefore can load any url.

[jcesarmobile]

According to the own plugin docs, cordova-plugin-inappbrowser is not subject to the whitelist restrictions:
https://github.com/apache/cordova-plugin-inappbrowser/blob/master/README.md#windowopen

Can you provide a sample app where the cordova-plugin-inappbrowser respects the whitelist?

[Dante1349]

@jcesarmobile you are right, I didn't know that. But should't the access orgin list still be configurable?

[jcesarmobile]

I've changed the name to accessOrigins as it populates access tags as allowedHosts could be confused with allow-navigation.
Also improved the description and fixed a few bugs and improved the resulting formatting, and more importantly, default to <access origin="*" /> if the config is not present so it's not a breaking change for existing users.