COOP and HTTPS state "deprecated"

[domenic]

c9fddd7 introduced COOP with the secure context check using "Is url potentially trustworthy?". This gives the wrong answer for cases where the environment's HTTPS state is "deprecated".

#5659 can provide the foundation to fix this, allowing us to check the environment, instead of the URL.