default uitour permission does not work with 1st party isolation

While working on #26962 (moved), Kathy and I discovered that first party isolation breaks the behavior of the default uitour permissions (listed in browser/app/permissions). This bug makes it impossible to use a default permission for an https:// site. We have a patch which we will post soon.