feat(browser): unify site credentials with browser profiles (BR-2)

- Inject the site account Cookie (manual + auto-login session, session wins)
  into the camofox profile before the first tab opens; password accounts
  without a session run refresh-login first; API Key sites are skipped.
- Cookie expired after injection -> credential.status=expired; cookie
  accounts go to waiting/login_required ("log in once, applies site-wide").
- Write back site-domain cookies from the browser on handover, session close,
  every 10 min of activity, and from refresh-login when the stored cookie is
  invalid (verified before saving). user_info.cookieOrigin records
  source=browser; source shown as manual/login/browser in the origin view.
- New camofox plugin umt-cookies (GET/POST /umt/sessions/:userId/cookies
  under the access key); profile dir 0700/files 0600 in the desktop image.
- Single entry: sources-identity/service/credentials.ts.
- Real check: HHClub cookie injected into a fresh profile -> home page
  logged in (logout link present), 5 cookies read back.

Requires rebuilding umt-browser-desktop (docker compose build camofox &&
docker compose up -d camofox) to take effect.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/web/app/routes/console/sites.$siteId.tsx

@@ -17,7 +17,7 @@ import { Link, useNavigate, useParams, useSearchParams } from "react-router";
 import { toast } from "sonner";
 import { useInventory } from "~/api/inventory.ts";
 import { type ReleaseFilters, useSiteReleases } from "~/api/releases.ts";
-import { accessSummary, snapshotStale, useSiteRequestStats, useSites, useSnapshotSite } from "~/api/sites.ts";
+import { snapshotStale, useSites, useSnapshotSite } from "~/api/sites.ts";
 import { openAgentDrawer } from "~/components/agent/agent-store.ts";
 import { SiteOriginPanel } from "~/components/browser/desktop-view.tsx";
 import { DetailSection } from "~/components/console/detail-sheet.tsx";
@@ -157,7 +157,6 @@ export default function SiteWorkbenchPage() {
   const staleBefore = refreshFailed ? now + 1 : s ? now - (s.snapshotIntervalSec ?? 3600) * 2000 : null;
   const selected = all.find((r) => r.id === openId) ?? null;
   const freeCount = all.filter(isFree).length;
-  const reqStats = useSiteRequestStats(tab === "resources" ? siteId : undefined);
 
   const reset = () => {
     setQInput("");
@@ -293,14 +292,10 @@ export default function SiteWorkbenchPage() {
                   variant="outline"
                   size="sm"
                   disabled={!s?.enabled || snap.isPending}
-                  title={
-                    reqStats.data
-                      ? `抓取站点列表前 ${reqStats.data.access.snapshotMaxPages} 页（受站点限流）`
-                      : "抓取站点列表（受站点限流）"
-                  }
+                  title="手动快照（受站点限流）"
                   onClick={() =>
                     snap.mutate(
-                      { id: siteId },
+                      { id: siteId, maxPages: 2 },
                       {
                         onSuccess: () => toast.success("快照已排队"),
                         onError: (e) => toast.error(errorMessage(e)),
@@ -394,11 +389,6 @@ export default function SiteWorkbenchPage() {
                     已加载 {all.length} 条{localActive ? `，本地筛选后 ${rows.length} 条` : ""}
                   </span>
                   {freeCount ? <span>其中免费 {freeCount}</span> : null}
-                  {reqStats.data ? (
-                    <span className="ml-auto" title={accessSummary(reqStats.data)}>
-                      近 24 小时请求站点 {reqStats.data.last24h} 次
-                    </span>
-                  ) : null}
                   {releases.isFetching && !releases.isFetchingNextPage ? <span>刷新中…</span> : null}
                 </div>
                 <ul className="divide-y divide-border/60">