feat(browser): ship camofox v1.17.0 in compose, verified on a real instance

- compose: camofox service on by default (internal only, volume umt-camofox,
  healthcheck, CAMOFOX_REPLICAS=0 to skip); app depends on it with
  service_started/required=false and auto-registers camofox-env from
  BROWSER_PROVIDER_URL / BROWSER_ACCESS_KEY / BROWSER_ENABLED
- docker/camofox/Dockerfile: builds upstream tag v1.17.0 (389c996); fixes the
  upstream Dockerfile (missing postinstall.js before npm ci, sh -c not
  forwarding SIGTERM so logins were never persisted on restart)
- adapter fixes from the real container: coordinate click via evaluate +
  selector, focus typing with mode=keyboard, password values redacted from
  ARIA snapshots/extract, downloads field names, 410 after browser restart
  treated as lost tab; navigate reopens a tab in the same session
- verified-capability table keyed by upstream version (1.17.0 all ten);
  other versions stay unverified; probe reports auth failures
- settings: browser providers block (create/edit/delete/probe, capability
  table); API POST/PATCH/DELETE /browser/providers, POST .../probe
- scripts/browser-verify: umtbr stack + mock NexusPHP run of REQ 4.7.4 items
- docs: runbook browser §1/§7 (real-instance record), deploy §2.1

Co-Authored-By: Claude Opus 5.5 <[email protected]>

docker/compose.env.example

@@ -26,3 +26,21 @@ LOG_LEVEL=info
 # WORKER_AGENT_CONCURRENCY=2
 # 手动按路径整理时递归遍历的文件数上限(dryRun 超出返回 truncated,正式执行拒绝)
 # ORGANIZE_WALK_MAX_FILES=5000
+
+# ── 浏览器服务(camofox-browser,原站视图 / Agent 浏览器能力;docs/runbook/browser.md)──
+# 缺省随 compose 起一个 camofox 容器(只在内网,不映射端口),app 自动登记为 camofox-env。
+# 访问凭据:camofox 与 app 共用;建议设置(openssl rand -hex 24)
+CAMOFOX_ACCESS_KEY=
+# 接自有 camofox 实例:改成它的地址与凭据,并把 CAMOFOX_REPLICAS 设 0
+# BROWSER_PROVIDER_URL=http://camofox:9377
+# BROWSER_ACCESS_KEY=
+# 完全不用浏览器:CAMOFOX_REPLICAS=0 且 BROWSER_ENABLED=false(界面标"浏览器不可用")
+# CAMOFOX_REPLICAS=1
+# BROWSER_ENABLED=true
+# camofox 调优(可选):会话空闲回收(回收时落盘登录状态)、浏览器空闲退出、最多会话数、内存上限
+# CAMOFOX_SESSION_TIMEOUT_MS=1800000
+# CAMOFOX_BROWSER_IDLE_TIMEOUT_MS=300000
+# CAMOFOX_MAX_SESSIONS=8
+# CAMOFOX_MEM_LIMIT=2g
+# CAMOFOX_LOCALE=zh-CN
+# CAMOFOX_TIMEZONE=Asia/Shanghai