Add a response middleware to add the FLoC opt-out header

[pmac]

See this article: https://paramdeo.com//blog/opting-your-website-out-of-googles-floc-network

tl;dr is that this header should be in responses: Permissions-Policy: interest-cohort=()