require-trusted-types-for 'wasm'

We could investigate if it makes sense to gate WASM compilation / instantiation by requiring a TrustedWasm or a TrustedWasmUrl.
This could replace or extend the proposed [Origin Bound Permission](https://github.com/WebAssembly/content-security-policy/blob/master/proposals/CSP.md#proposed-origin-bound-permission) in CSP for WASM.  
