feat(browser): unify site credentials with browser profiles (BR-2)

- Inject the site account Cookie (manual + auto-login session, session wins)
  into the camofox profile before the first tab opens; password accounts
  without a session run refresh-login first; API Key sites are skipped.
- Cookie expired after injection -> credential.status=expired; cookie
  accounts go to waiting/login_required ("log in once, applies site-wide").
- Write back site-domain cookies from the browser on handover, session close,
  every 10 min of activity, and from refresh-login when the stored cookie is
  invalid (verified before saving). user_info.cookieOrigin records
  source=browser; source shown as manual/login/browser in the origin view.
- New camofox plugin umt-cookies (GET/POST /umt/sessions/:userId/cookies
  under the access key); profile dir 0700/files 0600 in the desktop image.
- Single entry: sources-identity/service/credentials.ts.
- Real check: HHClub cookie injected into a fresh profile -> home page
  logged in (logout link present), 5 cookies read back.

Requires rebuilding umt-browser-desktop (docker compose build camofox &&
docker compose up -d camofox) to take effect.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/web/app/components/agent/agent-interaction.tsx

@@ -32,15 +32,18 @@ export function planTodoItems(steps: AgentPlanStep[]): TodoItem[] {
   }));
 }
 
-/** 步骤清单:会话页顶部完整列表(实时勾选);抽屉里压缩成一行进度 */
+/** 步骤清单:会话页右侧栏完整列表(实时勾选);compact 压缩成一行进度 */
 export function RunPlan({
   plan,
   active,
   compact = false,
+  fill = false,
 }: {
   plan: { steps: AgentPlanStep[]; revision: number } | null;
   active: boolean;
   compact?: boolean;
+  /** 侧栏 / 展开的概况条里:不限高、不自动收起 */
+  fill?: boolean;
 }) {
   if (!plan?.steps.length) return null;
   const done = plan.steps.filter((s) => s.status === "done" || s.status === "skipped").length;
@@ -79,8 +82,8 @@ export function RunPlan({
       title="步骤"
       items={planTodoItems(plan.steps)}
       defaultOpen
-      collapseOnComplete={!active}
-      maxHeightClassName="max-h-56"
+      collapseOnComplete={!fill && !active}
+      maxHeightClassName={fill ? "max-h-none" : "max-h-56"}
     />
   );
 }