WebXR Layers — RASTERIZER_DISCARD bypass of swap-chain clear

Tap a button to start an immersive session. In the rAF callback the page enables GL_RASTERIZER_DISCARD immediately before getViewSubImage(), defeating the security-clear in XRWebGLSwapChain::ClearCurrentTexture(), and then reads back the un-cleared AHardwareBuffer contents.