Add ability to set Cross-Origin-Opener-Policy header (unrolled#80)

* Add ability to set Cross-Origin-Opener-Policy header

* Document CrossOriginOpenerPolicy

Add SSLHost logic to ModifyResponseHeaders

go module compatibility