feat(analyzer): add COOP + COEP scoring

[caugner]

Description

Adds scoring for the Cross-Origin-Opener-Policy (COOP) and Cross-Origin-Embedder-Policy (COEP) headers.

Motivation

Reward sites that set these headers correctly.

Additional details

COOP scoring (cf. this comment):

Test result	Description	Modifier
coop-not-implemented	COOP header not set	0
coop-implemented-with-same-origin	COOP header set to same-origin, enforcing site isolation from the opener	10
coop-implemented-with-same-origin-allow-popups	COOP header set to same-origin-allow-popups, enforcing site isolation from the opener but allows trusted resources such as for OAuth or payments	10
coop-implemented-with-noopener-allow-popups	COOP header set to noopener-allow-popups, enforcing site isolation from the opener even if they are same origin	10
coop-implemented-with-unsafe-none	COOP header set to unsafe-none, the document permits sharing its browsing context group with any other document, and may therefore be unsafe	0

COEP scoring (cf. this comment):

Test result	Description	Modifier
coep-not-implemented	COEP header not set	0
coep-implemented-with-require-corp	COEP header set to require-corp, restricting loading cross origin resources	10
coep-implemented-with-credentialless	COEP header set to credentialless, allowing loading cross origin resources but without sending credentials in the requests	10
coep-implemented-with-unsafe-none	COEP header set to unsafe-none, allowing loading cross origin resources, which is the default value	0

In addition to these:

Test result	Description	Modifier
coop-header-invalid	COOP header cannot be recognized	-5
coep-header-invalid	COEP header cannot be recognized	-5

Related issues and pull requests

Fixes #410.