Don't let Mozilla recommend extensions again

It seems we need to ramp up our defense against the threat in #22899 (closed) again with ESR 68 as our users are getting shown recommended extensions again.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information