This solved it
const responseHeaderNamesArray = responseHeaderNames.substring(1, responseHeaderNames.length - 1).split(',').map(h => h.trim());
// Remove brackets [], split string by comma, Trim whitespace
responseHeaderNamesArray.forEach(element => {
print(element+": "+context.getVariable('response.header.'+element));
// ... perform need operation for each response header
});
output is
Access-Control-Allow-Origin:
Content-Encoding: gzip
Content-Type: application/json; charset=utf-8
Vary: Origin
...etc.