Strips fbclid/gclid/utm_*/msclkid/ttclid and other known ad-tracking
query params from the URL bar via history.replaceState -- no reload,
no network requests. Handles SPA navigation too (pushState/replaceState
wrapping, popstate/hashchange), since client-side routers often re-add
tracking params on route changes.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>