feat(browser): unify site credentials with browser profiles (BR-2)

- Inject the site account Cookie (manual + auto-login session, session wins)
  into the camofox profile before the first tab opens; password accounts
  without a session run refresh-login first; API Key sites are skipped.
- Cookie expired after injection -> credential.status=expired; cookie
  accounts go to waiting/login_required ("log in once, applies site-wide").
- Write back site-domain cookies from the browser on handover, session close,
  every 10 min of activity, and from refresh-login when the stored cookie is
  invalid (verified before saving). user_info.cookieOrigin records
  source=browser; source shown as manual/login/browser in the origin view.
- New camofox plugin umt-cookies (GET/POST /umt/sessions/:userId/cookies
  under the access key); profile dir 0700/files 0600 in the desktop image.
- Single entry: sources-identity/service/credentials.ts.
- Real check: HHClub cookie injected into a fresh profile -> home page
  logged in (logout link present), 5 cookies read back.

Requires rebuilding umt-browser-desktop (docker compose build camofox &&
docker compose up -d camofox) to take effect.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

packages/db/migrations/0046_site_request_count.ts

@@ -1,25 +0,0 @@
-import type { Kysely } from "kysely";
-import { dropTables, execDdl } from "../src/migration-helpers.ts";
-
-// 站点请求计数:每次从站点限流器拿到令牌(列表 / 搜索 / 详情 / 下载 / 登录 / 用户数据 / 原站视图)记一次,
-// 按小时聚合,api / worker 多进程共用。站点页展示"最近 24 小时请求次数";保留 7 天,写入时顺手清理。
-
-// biome-ignore lint/suspicious/noExplicitAny: 迁移不依赖应用表类型
-export async function up(db: Kysely<any>): Promise<void> {
-  await execDdl(
-    db,
-    `
-create table site_request_count (
-  site_id uuid not null references site(id) on delete cascade,
-  hour timestamptz not null,
-  count integer not null default 0 check (count >= 0),
-  primary key (site_id, hour)
-);
-`,
-  );
-}
-
-// biome-ignore lint/suspicious/noExplicitAny: 同上
-export async function down(db: Kysely<any>): Promise<void> {
-  await execDdl(db, dropTables(["site_request_count"]));
-}

packages/db/test/schema.test.ts

@@ -119,8 +119,6 @@ const EXPECTED_TABLES = [
   "rate_limit_bucket",
   // C2-A PG 短期缓存(0042,UNLOGGED)
   "kv_cache",
-  // 站点请求计数(0046,按小时聚合)
-  "site_request_count",
 ].sort();
 
 /** 不走 entityTable() 的表:追加型/引擎自有表,没有 uuid id + created_at/updated_at 三件套 */
@@ -149,8 +147,6 @@ const NON_ENTITY_TABLES = [
   "rate_limit_bucket",
   // 缓存:(region, key) 主键
   "kv_cache",
-  // 站点请求计数:(site_id, hour) 主键
-  "site_request_count",
 ];
 
 describe.skipIf(skip)("schema migrations (real PG)", () => {