chore(web): drop iabjs:// in-app browser noise via denyUrls

Android Instagram in-app browser injects scripts under the iabjs:// scheme
(navigation_performance_logger_android) that throw bridge errors like
"Java object is gone" during beforeunload. denyUrls on /iabjs:\/\// drops
the whole family at the source, message-independent. Also added the message
to ignoreErrors as a fallback.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

apps/web/src/lib/sentry.ts

@@ -54,7 +54,13 @@ export async function initSentry() {
         "undefined is not an object (evaluating 'window.webkit",
         // iOS in-app browsers fail to start AudioContext without a user gesture.
         "Failed to start the audio device",
+        // Android Instagram in-app browser bridge teardown during beforeunload.
+        "Java object is gone",
       ],
+      // Drop anything thrown by in-app browser injected scripts (Instagram/FB
+      // Android use the iabjs:// scheme). Message-independent, so it catches the
+      // whole family of in-app browser bridge errors at the source URL.
+      denyUrls: [/iabjs:\/\//],
     });
     initialized = true;
     console.log("[sentry] browser SDK initialized");