improve contentAreaClick
This adds a few missing options used by BrowserUtils.whereToOpenLink, as
well as finally passing CSP and ReferrerInfo. Unlike Mozilla, we call
contentAreaClick directly from the parent process (they from
ClickHandlerChild), so we don't need to serialize/deserialize these
objects. However, they get CSP from event.originalTarget.ownerDocument
and try to init ReferrerInfo from initWithNode(event.composedTarget),
neither of which we have access to from the parent process.
Note that referrerInfo.initWithDocument() was introduced with mozilla69:
https://hg.mozilla.org/mozilla-central/rev/
b5df2e6d8478cb4aea88d109259714ca2772b6cd#l1.29