Remove tracking query parameters by default

[be-student]

Summary

• use the 23 current PrivacyTests tracking query parameters when removeQueryParams is enabled without configuration
• preserve explicit string, array, and empty-array configurations
• cover both direct filter behavior and the runtime filter-context path

Closes #1263

The default list is pinned to privacytests/privacytests@dda473a, so its provenance and update boundary are explicit.

Validation

• Baseline: the new default-list regression failed because all 23 tracking parameters remained in the URL
• npm run test:only -- src/archivist/fetcher/index.test.js src/archivist/extract/filter.test.js src/archivist/extract/exposedFilters.test.js (65 passing)
• npx eslint src/archivist/extract/exposedFilters.js src/archivist/extract/exposedFilters.test.js src/archivist/extract/filter.test.js
• git diff --check