Enable kGlicActorPermissionsAutoReject by default.

The risk to flip this feature to true is extremely low, as the feature's
core logic (which denies permissions) is only activated for a very small
and specific set of internal users (when kGlicActor flag is true and the
actor is operating on the current webcontents). Enabling this to true
will let this functionality be available to the internal dogfooders /
engineers.

Enabled-by-default-reason:killswitch

design doc: go/bd-web-permissions-dd

Bug: b:422542694
Change-Id: I535b1c1742ae74a8feed4151dfe1cfd53bd3dbe9
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6976166
Reviewed-by: Andy Paicu <andypaicu@chromium.org>
Commit-Queue: Michelle Abreo <michelleabreo@google.com>
Cr-Commit-Position: refs/heads/main@{#1520255}