feat(browser): unify site credentials with browser profiles (BR-2)

- Inject the site account Cookie (manual + auto-login session, session wins)
  into the camofox profile before the first tab opens; password accounts
  without a session run refresh-login first; API Key sites are skipped.
- Cookie expired after injection -> credential.status=expired; cookie
  accounts go to waiting/login_required ("log in once, applies site-wide").
- Write back site-domain cookies from the browser on handover, session close,
  every 10 min of activity, and from refresh-login when the stored cookie is
  invalid (verified before saving). user_info.cookieOrigin records
  source=browser; source shown as manual/login/browser in the origin view.
- New camofox plugin umt-cookies (GET/POST /umt/sessions/:userId/cookies
  under the access key); profile dir 0700/files 0600 in the desktop image.
- Single entry: sources-identity/service/credentials.ts.
- Real check: HHClub cookie injected into a fresh profile -> home page
  logged in (logout link present), 5 cookies read back.

Requires rebuilding umt-browser-desktop (docker compose build camofox &&
docker compose up -d camofox) to take effect.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/web/app/components/sites/site-overview.tsx

@@ -1,5 +1,5 @@
 import type { SiteListItem } from "@umt/contracts";
-import { accessSummary, useSiteRequestStats, useSiteUserData } from "~/api/sites.ts";
+import { useSiteUserData } from "~/api/sites.ts";
 import { DetailSection } from "~/components/console/detail-sheet.tsx";
 import { ErrorState, LoadingState } from "~/components/console/empty-state.tsx";
 import { KvList } from "~/components/console/kv-list.tsx";
@@ -26,7 +26,6 @@ export function SiteOverview({ site }: { site: SiteListItem }) {
   const acc = primaryAccount(site.accounts);
   const u = dAcc?.userData ?? null;
   const history = useSiteUserData(site.id, dAcc?.id, 30);
-  const stats = useSiteRequestStats(site.id);
   const st = ACCOUNT_OVERALL[overallStatus(site)];
   const h = healthLine(site.lastHealth, site.lastHealthAt);
 
@@ -105,17 +104,6 @@ export function SiteOverview({ site }: { site: SiteListItem }) {
                     : "未开启",
                 },
                 { label: "限流", value: rateLimitText(site.rateLimit) },
-                {
-                  label: "近 24 小时请求",
-                  value: stats.data ? (
-                    <span>
-                      {stats.data.last24h} 次
-                      <span className="block text-meta text-muted-foreground">{accessSummary(stats.data)}</span>
-                    </span>
-                  ) : (
-                    "—"
-                  ),
-                },
                 { label: "代理", value: site.proxy ? "使用" : "不使用" },
               ]}
             />