Add iOS check into manual passes that ensured you can't trigger JS from the omnibox

[kjozwiak]

As per brave/brave-ios#8453 (comment), we'll need to add a quick check into our existing manual passes to ensure that users can't trigger JS from the omnibox as demonstrated via brave/brave-ios#8453 (comment). We can basically use the same STR/Case within that issue, just need to reword it. This should be added into all our manual passes for iOS.

CCing @hffvld @Uni-verse