Run all CSP tests in CI by default. (#36436)

Extending the original set from #36402 since there are additional tests
relevant to the work happening in #36409 and #36363.

Testing: New tests in CI.
Fixes: Part of https://github.com/servo/servo/issues/4577

Signed-off-by: Josh Matthews <josh@joshmatthews.net>

tests/wpt/meta/content-security-policy/base-uri/base-uri-deny-url-encoded-host.sub.html.ini

@@ -0,0 +1,7 @@
+[base-uri-deny-url-encoded-host.sub.html]
+  expected: TIMEOUT
+  [Check that baseURI fires a securitypolicyviolation event when it does not match the csp directive due to a url encoded host character.]
+    expected: NOTRUN
+
+  [Check that the baseURI is not set when it does not match the csp directive]
+    expected: FAIL

tests/wpt/meta/content-security-policy/base-uri/base-uri-deny.sub.html.ini

@@ -0,0 +1,7 @@
+[base-uri-deny.sub.html]
+  expected: TIMEOUT
+  [Check that baseURI fires a securitypolicyviolation event when it does not match the csp directive]
+    expected: NOTRUN
+
+  [Check that the baseURI is not set when it does not match the csp directive]
+    expected: FAIL

tests/wpt/meta/content-security-policy/base-uri/base-uri_iframe_sandbox.sub.html.ini

@@ -0,0 +1,7 @@
+[base-uri_iframe_sandbox.sub.html]
+  expected: TIMEOUT
+  [base-uri 'self' works with same-origin sandboxed iframes.]
+    expected: TIMEOUT
+
+  [base-uri 'self' blocks foreign-origin sandboxed iframes.]
+    expected: TIMEOUT

tests/wpt/meta/content-security-policy/base-uri/report-uri-does-not-respect-base-uri.sub.html.ini

@@ -0,0 +1,10 @@
+[report-uri-does-not-respect-base-uri.sub.html]
+  expected: TIMEOUT
+  [Test that image does not load]
+    expected: NOTRUN
+
+  [Event is fired]
+    expected: TIMEOUT
+
+  [Violation report status OK.]
+    expected: FAIL