fix: prevent cached commerce attributes in Rokt placements

[rmi22186]

Summary

• Add a built-in Rokt selectPlacements attribute persistence denylist for commerce/order attributes.
• Prevent denylisted attributes from being cached in the kit’s userAttributes.
• Prevent stale denylisted user attributes from being merged into later launcher.selectPlacements calls.
• Preserve explicitly passed selectPlacements({ attributes }) values for the current call, while avoiding persistence for future calls.

Testing Plan

• Tests added
• tested on a local app, first calling selectPlacements with code in production to load all user attributes with commerce attributes that were passed to selectplacements, then

[mparticle-automation]

🎉 This PR is included in version 1.27.0 🎉

The release is available on:

• v1.27.0
• GitHub release

Your semantic-release bot 📦🚀