The Death of the X-XSS-Protection Header: A Web Security Post-Mortem (World Wide Web, 2026)