Isolate mediasource and blob URLs in all contexts
In #15502 (moved) we isolated blob URLs and disabled them in Worker contexts. This ticket is a follow-up to get the URL-bar-domain-based isolation implemented in Worker environments.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information