favicons in tab drop down list are not first-party isolated

gk noticed that the ESR52-based first-party isolation is not yet working with the tab dropdown list. See #16983 (moved) for our old fix.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information