Sync external request privacy disclosures

[baixiangcpp]

Summary

• Add a shared external-request disclosure helper so Privacy Policy and Trust Center use the same manifest-derived rows.
• Expand Privacy Policy external-request cards with hosts, purpose, data sent, and explicit-action consent copy.
• Add tests that keep Privacy and Trust Center on the shared disclosure source and verify YouTube, Vimeo, and Instagram confirmation flows still expose the expected hosts.

Validation

• npm test -- tests/component/privacy-page.test.tsx tests/component/trust-center-page.test.tsx tests/guards/tool-network-access-metadata.test.ts
• npm test -- tests/component/external-request-media-tools.test.tsx
• npm run check:types
• npm run check:i18n
• npm run check:i18n-qa
• npm run lint (passes with existing coverage/block-navigation.js warning)

Closes #256

[cloudflare-workers-and-pages]

Deploying byteflow with    Cloudflare Pages

Latest commit:	3097f6b
Status:	✅  Deploy successful!
Preview URL:	https://712d4382.byteflow-c58.pages.dev
Branch Preview URL:	https://fix-external-request-privacy.byteflow-c58.pages.dev

View logs