Isolate mediasource: URI to first party domain
In legacy/trac#15502 (moved), we isolated blob: URIs to the first party domain. We should ensure that the new mediasource: uris are similarly isolated.
When we do this, we should also ensure that these URIs are still properly isolated in odd contexts like WebWorkers, SharedWorkers, and ServiceWorkers, and add unit tests for this.