vcl_cookies: reduce text-vs-mobile cookie variance
This limits the "optin" case down to "(^|;\s*)optin=", and adds
the standard exceptions for static resources and the resource
"disable" Cookie-matching seems like it can go away too (I can't
find a source ref about it, and I don't see it in traffic), but
I'm not 100% sure yet.