[Spec] Define the behavior of upgrading insecure request

[linnan-github]

Fenced frames only allow potentially trustworthy urls and don't support upgrading insecure requests. The behavior should be documented in the explainer/spec.