…and window.open

The list of security options a <webview> guest always inherits from its
embedder, and the equivalent list child windows inherit from their parent,
omitted nodeIntegrationInWorker. As a result the webpreferences attribute
could set nodeIntegrationInWorker on a guest whose embedder had it disabled,
giving the guest's dedicated workers a Node environment the embedder itself
did not grant (and, with an unsandboxed embedder, dropping the guest out of
the sandbox). Add nodeIntegrationInWorker to both inheritance lists so a
guest can never be less secure than its embedder for this option.

Co-authored-by: Sam Attard <sattard@anthropic.com>