Correct Place to Set Global HTTP Headers?

You could extend controllers through application/core/MY_Controller.php, set headers in MY_Controller __construct() then instead of extending CI_Controller, for controllers that need this new header, extend as MY_Controller.

Without knowing ins and outs of your project of course, that would be my first consideration, which may or may not be right for you (or anyone).