Use standard cookie handling and build the CLI

[colinds]

Summary

• replace the local browser-cookie implementation with @steipete/sweet-cookie
• use cookie for Cookie headers and set-cookie-parser for Set-Cookie updates
• build one package that runs with Bun or Node
• document best-effort browser import on macOS, Linux, and Windows
• allow enough time to approve OS credential prompts and document --profile as the way to limit the scan
• package once in CI and test the same tarball in separate Bun and Node smoke jobs

Chrome and Edge profiles are discovered across macOS, Linux, and Windows. Arc targeting is macOS-only.
Brave and Chromium on Linux or Windows may need an explicit --profile path.

bunx --bun forkable-mcp@latest
npx forkable-mcp@latest

Each smoke job provisions only the runtime it tests.

Verification

• bun run check
• packaged smoke test with bunx --bun
• packaged smoke test with npx
• read-only local extraction found the Forkable session in Chrome Profile 1; no cookie value was printed or persisted

Stack: 1 of 4. Followed by #1.