Use a more robust approach to hide the "tracking protection" urlbar button

Currently, we modify the condition for adding the chromeUI class to the button, but we should probably just more directly apply a display: none rule in CSS so this is less fragile to upstream changes.