Disarm LockToOrigin for extensions under --isolate-extensions.
--isolate-extensions actually permits render process reuse, unlike
--site-per-process. This means that "one extension per process" isn't a
valid thing to enforce, which hopefully explains the process kills
we have seen in the wild.
Add a test that exercises this. It fails without the fix.