Revert "Convert WindowControlsOverlayEnabled from Pull to Push"

This reverts commit 09335b3c1fee7697ca1a293f4dd418ec20031ee0.

Reason for revert: ASan test failures on multiple bots:
https://ci.chromium.org/ui/p/chromium/builders/ci/Linux%20ASan%20LSan%20Tests%20(1)/133307/overview
https://ci.chromium.org/ui/p/chromium/builders/ci/Linux%20ChromiumOS%20MSan%20Tests/51750/overview
https://ci.chromium.org/ui/p/chromium/builders/ci/Linux%20MSan%20Tests/55517/overview
https://ci.chromium.org/ui/p/chromium/builders/ci/Linux%20UBSan%20Tests/5887/overview
https://ci.chromium.org/ui/p/chromium/builders/ci/win-asan/35189/overview
https://ci.chromium.org/ui/p/chromium/builders/ci/linux-blink-web-tests-force-accessibility-rel/36485/overview

Bug: 40756914
Original change's description:
> Convert WindowControlsOverlayEnabled from Pull to Push
>
> This makes BrowserViewLayout behave more like a standard layout
> manager.
>
> Bug: 40756914
> Change-Id: I3842d3a0798a3ee45be27cb983b34ea18e1675d8
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6492292
> Auto-Submit: Robert Liao <robliao@chromium.org>
> Reviewed-by: David Pennington <dpenning@chromium.org>
> Commit-Queue: David Pennington <dpenning@chromium.org>
> Cr-Commit-Position: refs/heads/main@{#1452097}

Bug: 40756914
No-Presubmit: true
No-Tree-Checks: true
No-Try: true
Change-Id: I71f24b5e515e0738e1506e57150bd0b85cf56da0
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6492863
Auto-Submit: Daniel Cheng <dcheng@chromium.org>
Bot-Commit: Rubber Stamper <rubber-stamper@appspot.gserviceaccount.com>
Commit-Queue: Rubber Stamper <rubber-stamper@appspot.gserviceaccount.com>
Owners-Override: Daniel Cheng <dcheng@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1452187}