v0.1.20

Fix restored browser auth seeds by carrying Chrome Safe Storage as a private fixture, so authenticated clean-VM rehearsals can decrypt restored Chrome cookies without keychain prompts. Tighten strict rehearsal checks to require that fixture before auth-present browser proof.