feat(cli): ship native browser control and web agent workflows

[jazelly]

• Add native Google Chrome and Brave Browser selection while keeping CloakBrowser as the explicit Anti-Detect path.
• Replace profile-copy workflows with browser-managed CDP attachment that preserves user-owned browsers, credentials, and resident sessions.
• Add the local Web AI interaction protocol, authenticated control plane, durable harness workflows, and native Codex session binding.
• Expand evidence-backed provider capability routing, file uploads, readiness handling, response diagnostics, experimental Dola support, and subscription-aware rate limits.
• Reuse idle provider tabs with isolated soft leases while preserving resident browsers and user-owned pages.
• Unify English and Simplified Chinese CLI, dashboard, documentation, privacy, command, and setup surfaces.
• Add output-savings processing, dashboard reporting, packaged runtime contracts, and ordered daemon shutdown behavior.
• Tighten incomplete DeepSeek, Qwen, Grok, and Kimi capability claims to match repeated real-provider evidence.
• Archive superseded browser-runtime roadmaps and align active plans, OpenAPI contracts, and test-profile policy with native browser control.
• Release tokenless as a minor update from 0.4.1 to 0.5.0 through 43 changesets with zero major entries.
• Validate the release with npm run check at 103 passing tests and focused real-provider gates for Claude Projects, Kimi conversations and search, and Qwen non-submission controls.