Add $wgCSPFalsePositiveUrls to release notes