feat(browser): unify site credentials with browser profiles (BR-2)

- Inject the site account Cookie (manual + auto-login session, session wins)
  into the camofox profile before the first tab opens; password accounts
  without a session run refresh-login first; API Key sites are skipped.
- Cookie expired after injection -> credential.status=expired; cookie
  accounts go to waiting/login_required ("log in once, applies site-wide").
- Write back site-domain cookies from the browser on handover, session close,
  every 10 min of activity, and from refresh-login when the stored cookie is
  invalid (verified before saving). user_info.cookieOrigin records
  source=browser; source shown as manual/login/browser in the origin view.
- New camofox plugin umt-cookies (GET/POST /umt/sessions/:userId/cookies
  under the access key); profile dir 0700/files 0600 in the desktop image.
- Single entry: sources-identity/service/credentials.ts.
- Real check: HHClub cookie injected into a fresh profile -> home page
  logged in (logout link present), 5 cookies read back.

Requires rebuilding umt-browser-desktop (docker compose build camofox &&
docker compose up -d camofox) to take effect.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

scripts/mp-sync/movieclaw-overrides/hhanclub.json

@@ -1,5 +1,5 @@
 {
-  "$comment": "HHClub 分类名取自 MovieClaw hhanclub.yaml 注释(导航栏分类表);REQ §4.5 要求综艺/体育/短剧保留原始分类。2026-09-29 真实账号核对:列表标题链接里带站点的新种标记「[新]」(详情页标题没有),用 replace 过滤掉;等级「贵宾」为 VIP;访问默认按低频原则收紧(快照只抓第 1 页、健康检测 6 小时、详情缓存 24 小时、搜索并发 1)。",
+  "$comment": "HHClub 分类名取自 MovieClaw hhanclub.yaml 注释(导航栏分类表);REQ §4.5 要求综艺/体育/短剧保留原始分类。",
   "umt": {
     "categoryNames": {
       "401": "电影",
@@ -12,37 +12,6 @@
       "410": "音乐",
       "411": "MV",
       "412": "短剧"
-    },
-    "version": "[email protected]+umt.1",
-    "rateLimit": {
-      "minIntervalMs": 3000,
-      "burst": 2
-    },
-    "vipLevels": ["贵宾", "VIP"],
-    "defaults": {
-      "snapshotIntervalSec": 3600,
-      "snapshotMaxPages": 1,
-      "healthCheckIntervalSec": 21600,
-      "userDataIntervalSec": 21600,
-      "searchConcurrency": 1,
-      "detailCacheSec": 86400
-    }
-  },
-  "torrents": {
-    "fields": {
-      "title": {
-        "text": "{% if fields['title_optional'] %}{{ fields['title_optional'] }}{% else %}{{ fields['title_default'] }}{% endif %}",
-        "filters": [
-          {
-            "name": "replace",
-            "args": ["[新]", ""]
-          },
-          {
-            "name": "replace",
-            "args": ["(新)", ""]
-          }
-        ]
-      }
     }
   }
 }