This replicates reCAPTCHA's header check so that ArkoseLabs only shows
up when the `X-GitLab-Show-Login-Captcha` header is set.
This should ensure that we don't challenge automated QA users.