Secure context features

[littledan]

Many web platform features, including some of the ones in the WinterCG common minimum API list, are restricted to secure contexts (i.e. https websites). We should probably be explicit somewhere in the standard that WinterCG environments are generally meant to be treated similarly to secure contexts.