web-feature: Connection allowlists

The Connection-Allowlist HTTP response header limits which requests a page may initiate using fetch and other APIs.