“Policies that mandate would-be hires to undergo urine screens for past cannabis exposure are invasive, discriminatory, and ineffective. They neither identify workers who may be under the influence, nor do they contribute to a safe work environment.”