FLEDGE: Fix gaps in validation of trustedScoringSignalsURL

... with renderer not checking for query/fragments/etc. which resulted
in the worklet later being killed trying to fetch things if those were
set, and adjusted the mojo traits to match.

Also fix a more narrow one in trustedBiddingSignalsURL: it was
accepting an empty query, while the browser-side validation wasn't, so
trying to use one would be a renderer kill. Made it into a nice error
instead.

Bug: 40914338
Change-Id: Ia63c31593720800319a59e45f5e56cd144b1f812
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/5426152


Reviewed-by: danakj <danakj@chromium.org>
Reviewed-by: mmenke <mmenke@chromium.org>
Commit-Queue: Maks Orlovich <morlovich@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1283310}