Kasada (and other WAFs) instantly reject browsers with "HeadlessChrome"
in the user-agent. Probe the raw UA at launch and replace it with
"Chrome" so every headless context passes WAF fingerprinting.