proposal: move frame-options directive out of UI safety spec into CSP 1.1

I'd like to move the frame-options directive out of the UI safety
speclet and into CSP proper. The X-Frame-Options header is growing in
usage across the web and I'd like its replacement to be solidified into
a spec that is actively being finished up rather than in the more
nebulous UI Safety spec.

-Dan Veditz