feat(browser): unify site credentials with browser profiles (BR-2)

- Inject the site account Cookie (manual + auto-login session, session wins)
  into the camofox profile before the first tab opens; password accounts
  without a session run refresh-login first; API Key sites are skipped.
- Cookie expired after injection -> credential.status=expired; cookie
  accounts go to waiting/login_required ("log in once, applies site-wide").
- Write back site-domain cookies from the browser on handover, session close,
  every 10 min of activity, and from refresh-login when the stored cookie is
  invalid (verified before saving). user_info.cookieOrigin records
  source=browser; source shown as manual/login/browser in the origin view.
- New camofox plugin umt-cookies (GET/POST /umt/sessions/:userId/cookies
  under the access key); profile dir 0700/files 0600 in the desktop image.
- Single entry: sources-identity/service/credentials.ts.
- Real check: HHClub cookie injected into a fresh profile -> home page
  logged in (logout link present), 5 cookies read back.

Requires rebuilding umt-browser-desktop (docker compose build camofox &&
docker compose up -d camofox) to take effect.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/web/app/api/sites.ts

@@ -12,7 +12,6 @@ import {
   SiteHealthResult,
   SiteListItem,
   SiteRefreshLoginAccepted,
-  SiteRequestStats,
   SiteSnapshot,
   type SiteUpdate,
   SiteUserDataPoint,
@@ -34,7 +33,6 @@ export const siteKeys = {
   one: (id: string) => ["sites", "one", id] as const,
   accounts: (siteId?: string) => ["sites", "accounts", siteId ?? "all"] as const,
   snapshots: (siteId: string) => ["sites", "snapshots", siteId] as const,
-  requestStats: (siteId: string) => ["sites", "request-stats", siteId] as const,
   definitions: () => ["sites", "definitions"] as const,
   userData: (siteId: string, accountId?: string, days = 30) =>
     ["sites", "user-data", siteId, accountId ?? "first", days] as const,
@@ -90,28 +88,6 @@ export function useSiteSnapshots(siteId: string | undefined, limit = 20) {
   });
 }
 
-/** 最近 24 小时对该站的请求次数与生效的访问默认(每分钟刷新) */
-export function useSiteRequestStats(siteId: string | undefined) {
-  return useQuery({
-    queryKey: siteKeys.requestStats(siteId ?? ""),
-    enabled: !!siteId,
-    refetchInterval: 60 * TTL_SECOND,
-    queryFn: ({ signal }) =>
-      apiParsed(SiteRequestStats, "/api/v1/sites/:id/request-stats", { pathParams: { id: siteId ?? "" }, signal }),
-  });
-}
-
-/** 访问默认的一句话说明:"快照每 60 分钟 1 页 · 健康检测每 6 小时 · 详情缓存 24 小时" */
-export function accessSummary(s: SiteRequestStats): string {
-  const dur = (sec: number) => (sec % 3600 === 0 ? `${sec / 3600} 小时` : `${Math.round(sec / 60)} 分钟`);
-  const parts = [
-    `快照每 ${dur(s.snapshotIntervalSec)} ${s.access.snapshotMaxPages} 页`,
-    `健康检测每 ${dur(s.access.healthCheckIntervalSec)}`,
-  ];
-  if (s.access.detailCacheSec > 0) parts.push(`详情缓存 ${dur(s.access.detailCacheSec)}`);
-  return parts.join(" · ");
-}
-
 /** 启用 / 停用站点 */
 export function useToggleSite() {
   const qc = useQueryClient();