fix(browser): restore platform-parameterized default Chrome root refusal

[Yeachan-Heo]

Regression

Current dev at 290b31c110889f375c7713b3f64bd10c6338093e fails its fresh-process coding-agent shard after merged PR #4539.

Exact failing run/job:

• Dev CI run: https://github.com/Yeachan-Heo/gajae-code/actions/runs/31867285336
• shard-3 job: https://github.com/Yeachan-Heo/gajae-code/actions/runs/31867285336/job/94970838703

Exact deterministic failure:

(fail) Chrome profile browser mode (#809) > rejects an explicit default Chrome user data directory on every platform
Expected promise that rejects

Evidence of causality:

• previous dev 96e718a2b0f2a46cad4876bf922886966c6fd0e3 had green Dev CI/shard-3 (31859882688 / 94952347084)
• merge 290b31c110 consists of PR fix(browser): default Chrome profile selection without unsafe data-root discovery #4539
• the failing test and browser profile implementation are both introduced/changed by fix(browser): default Chrome profile selection without unsafe data-root discovery #4539
• all other product jobs were green; evidence producer and aggregate failed only downstream from shard-3

Required outcome

Repair the platform-parameterized default-root refusal contract on current dev without weakening default-profile safety. Add/adjust regression coverage, open exactly one PR to dev, drive exact-head CI and independent review, then merge when green and approved.

—
[repo owner's gaebal-gajae (clawdbot) 🦞]

[Yeachan-Heo]

Fix-forward ownership started

Dedicated repair ownership is active from exact current dev 290b31c110889f375c7713b3f64bd10c6338093e.

The owner is reproducing the full-file fresh-process failure, preserving production support for LOCALAPPDATA, CHROME_USER_DATA_DIR, CHROME_CONFIG_HOME, and XDG_CONFIG_HOME, and repairing the test seam/default-root refusal contract without weakening Chrome 136+ safety. Required terminal path is one PR to dev, exact-head CI, independent review, merge, and verified green current-dev rerun.

This issue is also the explicit red-base blocker for PR #4571; browser changes will remain isolated here rather than duplicated into that PR.

—
[repo owner's gaebal-gajae (clawdbot) 🦞]

[Yeachan-Heo]

Fix-forward evidence: PR #4575

Exact repair head: ea1cb1b3038af9ae054f79ffe392db3b4d21cac3 (base 290b31c110889f375c7713b3f64bd10c6338093e).

The repair preserves configured production discovery overrides, injects one deterministic discovery environment into the Chrome-profile resolver test seam, rejects darwin/win32/linux default roots through the actual resolver, accepts custom roots, and preserves actual-host canonical/realpath comparison.

Evidence: focused browser profile suites 51 pass; coding-agent package check pass; fresh-process coding-agent shard 3/8 pass (175 files); affected planner, CLI smoke, and package build pass. PR #4575 targets dev; independent authorized review is requested and exact-head CI is pending.

—
[repo owner's gaebal-gajae (clawdbot) 🦞]

[Yeachan-Heo]

#4574 freshness rebase hold

PR #4575 now targets current dev 1cc986422ae335bc155740b1060f6be10cfee4b4 from exact head 9af837e5e017bcd2f5a2a802574853fab3c10a09. Fresh local proof: browser regression file 31 passing, coding-agent package check passing, and fresh-process shard 3/8 passing 175 files. The previous-base CI/digest evidence is superseded.

Authorized independent review is requested from @probepark and @HaD0Yun; exact-head CI runs under the canonical needs-human hold until an authenticated approval permits a merge-approved contract.

—
[repo owner's gaebal-gajae (clawdbot) 🦞]

[Yeachan-Heo]

#4574 current-dev supersession

PR #4575 has been restored first on current dev 2e3ccb5895568ffec709b3adba25bc919d6d248b, with exact head 189fc0fde625b2eb096db8c70bb77b1e3ff71e17. #4577 did not touch the browser repair files. Old-base approval/CI is stale and superseded.

Fresh focused 31-test, package-check, fresh-process shard 3/8 (175 files), affected planner/build, and CLI smoke evidence passed. New authorized review requests are active for @probepark and @HaD0Yun; exact-head CI is underway under the canonical needs-human hold.

—
[repo owner's gaebal-gajae (clawdbot) 🦞]