Keep megalist (contextual password manager) disabled for 16.0

This feature needs an audit, and most users will not have the password manager enabled anyway.

So let's set browser.contextual-password-manager.enabled to false for the 16.0 release.