[shared storage] Implement the Shared-Storage-Cross-Origin-Worklet-Allowed response header check

When: When creating a cross-origin worklet, require the
"Shared-Storage-Cross-Origin-Worklet-Allowed: ?1" response header,
or the request should fail (similar to the handling for CORS failure).

How: When creating the request (in
SharedStorageURLLoaderFactoryProxy::CreateLoaderAndStart), set
the destination to kSharedStorageWorklet. In
CorsURLLoader::OnReceiveResponse, for cross-origin request with
destination kSharedStorageWorklet, validate the response header.
Note that shared storage worklet request doesn't allow redirects,
so it's sufficient to check inside `OnReceiveResponse` only.

Spec patch: https://github.com/WICG/shared-storage/blob/9507e051575171051b33898ad4a376f576786da4/spec.bs

NO_IFTTT=Not adding the destination to request.idl, because the shared storage worklet request is not visible to service workers / JS.

Bug: 332564979
Change-Id: I6c2a07473527ede995cf4bd337d293f3168351bb
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/5417333
Reviewed-by: Hiroki Nakagawa <nhiroki@chromium.org>
Reviewed-by: Dominic Battre <battre@chromium.org>
Reviewed-by: Adam Rice <ricea@chromium.org>
Reviewed-by: Xinghui Lu <xinghuilu@chromium.org>
Commit-Queue: Yao Xiao <yaoxia@chromium.org>
Reviewed-by: Dominic Farolino <dom@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1286573}