feat!: harden raw browser control and packaging

- Add safe-by-default policy gates for raw command surfaces: command, script, and serve-http /command.

- Require explicit opt-ins for page reads, browser control, and high-risk commands such as dom.eval, storage.*, and screenshots.

- Remove all cookies support from CLI, SDK, extension commands, permissions, constants, docs, and tests.

- Add diagnostic, events, watch, workspace, remote, raw command, script, HTTP gateway, tree-view, session import/export, and extension info/capability commands.

- Add Chrome Web Store packaging that strips manifest.key while keeping local packages with a stable native-messaging extension ID.

- Bump browser-cli and extension version to 0.14.1 and cover the new behavior with pytest and extension packaging tests.

BREAKING CHANGE: cookies commands and the b.cookies SDK namespace have been removed; generic raw command execution now blocks non-safe commands unless explicitly allowed.

browser_cli/commands/link_serve.py

@@ -133,19 +133,19 @@ _LOOPBACK_HOSTS = {"127.0.0.1", "::1", "localhost"}
 @click.option("--token", default=None, metavar="SECRET",
               help="Shared bearer token required from callers (sent as 'Authorization: Bearer ...').")
 @click.option("--insecure", is_flag=True, default=False,
-              help="Run with NO token. Grants full browser control (cookies, pages) to anyone who can reach the port.")
+              help="Run with NO token. Grants full browser control to anyone who can reach the port.")
 @click.pass_context
 def cmd_link_serve(ctx, host, port, token, insecure):
   """Serve this browser to the ServiceLink mesh over HTTP /rpc.
 
-  Exposes the running browser (open/scrape pages, read cookies and storage), so
+  Exposes the running browser (open/scrape pages, read storage), so
   a token is required by default. Bind to loopback and keep the port off the
   public network.
   """
   if not token and not insecure:
     raise click.ClickException(
       "Refusing to start without --token (this endpoint can control your browser "
-      "and read its cookies). Pass --insecure to override on a trusted host."
+      "and read page/storage data). Pass --insecure to override on a trusted host."
     )
   if host not in _LOOPBACK_HOSTS:
     click.echo(