HG-422: Add wgCdnApiUrl to the whitelisted variables

The `ABTesting` script relies on `wgCdnApiUrl` to form the request urls.  This PR whitelists the `wgCdnApiUrl` variable so resulting URLs are valid.

/cc @hakubo