feat(browser): ship camofox v1.17.0 in compose, verified on a real instance

- compose: camofox service on by default (internal only, volume umt-camofox,
  healthcheck, CAMOFOX_REPLICAS=0 to skip); app depends on it with
  service_started/required=false and auto-registers camofox-env from
  BROWSER_PROVIDER_URL / BROWSER_ACCESS_KEY / BROWSER_ENABLED
- docker/camofox/Dockerfile: builds upstream tag v1.17.0 (389c996); fixes the
  upstream Dockerfile (missing postinstall.js before npm ci, sh -c not
  forwarding SIGTERM so logins were never persisted on restart)
- adapter fixes from the real container: coordinate click via evaluate +
  selector, focus typing with mode=keyboard, password values redacted from
  ARIA snapshots/extract, downloads field names, 410 after browser restart
  treated as lost tab; navigate reopens a tab in the same session
- verified-capability table keyed by upstream version (1.17.0 all ten);
  other versions stay unverified; probe reports auth failures
- settings: browser providers block (create/edit/delete/probe, capability
  table); API POST/PATCH/DELETE /browser/providers, POST .../probe
- scripts/browser-verify: umtbr stack + mock NexusPHP run of REQ 4.7.4 items
- docs: runbook browser §1/§7 (real-instance record), deploy §2.1

Co-Authored-By: Claude Opus 5.5 <[email protected]>

packages/testkit/src/browser/mock-camofox.ts

@@ -452,7 +452,11 @@ export async function createMockCamofox(opts: MockCamofoxOptions = {}): Promise<
                 paths[p] = ops;
               }
           return {
-            json: { openapi: "3.0.3", info: { title: "camofox-browser", version: opts.version ?? "1.17.0" }, paths },
+            json: {
+              openapi: "3.0.3",
+              info: { title: "camofox-browser", version: opts.version ?? "1.17.0-mock" },
+              paths,
+            },
           };
         },
       ],
@@ -574,8 +578,7 @@ export async function createMockCamofox(opts: MockCamofoxOptions = {}): Promise<
         /^\/tabs\/([^/]+)\/click$/,
         action("click", (t, b) => {
           // 1.17.0 实测:只认 ref / selector,坐标点击由适配器先 evaluate 打标记
-          if (typeof b.ref !== "string" && typeof b.selector !== "string")
-            return err(400, "ref or selector required");
+          if (typeof b.ref !== "string" && typeof b.selector !== "string") return err(400, "ref or selector required");
           const line = findLine(t, b);
           if (!line) return typeof b.ref === "string" ? err(422, "Unknown ref") : undefined;
           if (line.role.startsWith("textbox")) t.focus = line.ref;