Module scripts to be fetched with "same-origin" for credentials

[annevk]

I noticed https://w3c.github.io/ServiceWorker/#update-algorithm passes "omit" and that's almost certainly wrong. See whatwg/html@5fabb58 for more details.

[monica-ch]

[Bug triage] Issue still exists, needs spec update

[yoshisatoyanagisawa]

With #1829, the credential mode for module service worker scripts has been updated from "omit" to "same-origin" to align with the HTML spec and existing browser behavior.

However, if there are any specific use cases where "omit" is strictly required, please let us know.