feat: vendor and censor the phishing blocklist at build time (closes #219)

src/shared/ens.js

@@ -4,8 +4,7 @@
 //
 // POPUP ONLY. localStorage does not exist in the Chrome MV3 service worker,
 // so this module must not be pulled into src/background/. Anything the
-// background context needs to cache goes in extension storage instead (see
-// shared/phishingDomains.js).
+// background context needs to cache goes in extension storage instead.
 
 const { getProvider } = require("./balances");
 const { log } = require("./log");