Require online OCSP/CRL checks for local trust anchors

Setting the policy to True means Brave always performs revocation checking for successfully validated server certificates signed by locally installed CA certificates. If Brave can't get revocation status information, Brave treats these certificates as revoked (hard-fail). Setting the policy to False or leaving it unset means Brave uses existing online revocation-checking settings. On macOS, this policy has no effect if the ChromeRootStoreEnabled policy is set to False.