Since it's a local server, headers can be added as parameters:
runStaticServer("./docs", headers= c(`Access-Control-Allow-Origin`='*'))