Backport ESR 102.3 security fixes to 91.13-based Tor Browser

resolves #41310 (closed)

A couple patches didn't apply cleanly so the reviewer should compare to the gecko-dev commits for those linked in the issue.