refactor how build GSB urls/params
clarify safe browsing backends supported