Make TransportSecurityState::MaybeNotifyExpectCTFailed take a NIK.

It then passes the NetworkIsolationKey on to the ExpectCTReporter. Also
plumb NIK through the other TransportSecurityState methods that call
it.  Only one caller of TransportSecurityState is updated to pass in
a non-empty NIK.  The other 3 callers will be addressed in followup CLs.

Bug: 969893, 1082280
Change-Id: I2982c06288e6ff9ec2dd863b0ecbcf01f46b2791
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2217871
Reviewed-by: Emily Stark <[email protected]>
Commit-Queue: Matt Menke <[email protected]>
Cr-Commit-Position: refs/heads/master@{#773345}
diff --git a/net/url_request/url_request_http_job.cc b/net/url_request/url_request_http_job.cc
index ed277207..80130a8 100644
--- a/net/url_request/url_request_http_job.cc
+++ b/net/url_request/url_request_http_job.cc
@@ -807,7 +807,8 @@
   std::string value;
   if (headers->GetNormalizedHeader("Expect-CT", &value)) {
     security_state->ProcessExpectCTHeader(
-        value, HostPortPair::FromURL(request_info_.url), ssl_info);
+        value, HostPortPair::FromURL(request_info_.url), ssl_info,
+        request_->isolation_info().network_isolation_key());
   }
 }