[codex] Add Browser Use cloud integration

[furukama]

Summary

Adds Browser Use cloud support to HybridClaw's browser stack without replacing the existing local browser path.

What Changed

• added a Browser Use cloud provider in container/src/browser-use-provider.ts
• wired Browser Use cloud CDP and agent-mode execution into browser-tools
• added browser_agent_task, browser_save_profile, browser_load_profile, and browser_get_recording
• added runtime config and container env plumbing for Browser Use settings and credentials
• added structured audit events for Browser Use sessions and agent tasks
• hardened the integration so local browser flows remain the default, cloud workspace sync is allowlist-based, and durable audit does not persist live capability URLs
• added targeted tests for provider behavior, routing, schema shape, cleanup, and audit emission

Why

HybridClaw already has a mature local browser stack. This PR adds Browser Use cloud as an additional execution mode for cloud CDP sessions, delegated browser agent tasks, cloud profiles, and recordings, while preserving local authenticated browsing and avoiding unsafe workspace and audit behavior.

Validation

• npm --prefix container run lint
• npm run typecheck
• npm run build
• ./node_modules/.bin/vitest run --configLoader runner --config vitest.unit.config.ts tests/browser-use-provider.test.ts tests/browser-tool-schema.test.ts tests/audit-events.test.ts tests/browser-close-cleanup.test.ts tests/browser-navigate-routing.test.ts

Notes

• PR is opened as draft because this is a substantial browser/runtime integration.
• hybridclaw browser login remains local-profile based; this PR does not introduce a CLI cloud-login UX.