[code] spawn ext host worker on own origin

[akosyakov]

It should ensure that frontend extensions cannot access the main origin data.

[csweichel]

Steps forward:

1. Try host cookie (don't set a domain)
2. See if this solves the issue
3. If it breaks dev-staging, fix it (talk to @AlexTugarev)