COEP: Enforce CORP in cache.match()

[PROTOTYPE] => DO NOT COMMIT.

Document using:
"Cross-Origin-Embedder-Policy: require-corp"
must not access cross-origin response that do not have the header:
"Cross-Origin-Resource-Policy: cross-site"

This is about only no-cors requests. CORS requests are checked against the
CORS headers instead.

See:
 - whatwg/fetch#985
 - w3c/ServiceWorker#1490

Bug:1031542
Change-Id: I94a2cb9435fcf3e76f57a8f3d3344c87fa23f9a9

html/cross-origin-embedder-policy/require-corp-load-from-cache-storage.https.html

@@ -109,7 +109,7 @@
     const cache = await caches.open('v1');
 
     if (response_type === 'error') {
-      await promise_rejects(t, new TypeError(), cache.match(url));
+      await promise_rejects(t, 15 /* InvalidAccessError*/, cache.match(url));
       return;
     }