add Allow header to "method not allowed" responses on v1/chat/completions
Docs mention use of the api as `curl ch.at/v1/chat/completions` which
will trigger a GET request, resulting in a 405 response.
Returning an `Allow: POST` header will let clients know they're expected
to post data instead.
The specification as published by the http working group requires it.
https://httpwg.org/specs/rfc9110.html#status.405