Your JSON looks fine, but your CORS configuration is missing the header setting I mentioned above. Here's your CORS test result. It tells you how to fix it at the bottom:
https://cors-test.codehappy.dev/?url=https%3A%2F%2Ftomgag.net%2F.well-known%2Fnostr.json%3Fname%3D_&method=get
