docs: add topic-agnostic Lessons and Gotchas page Distills four transferable engineering lessons from replicating an authenticated browser request: capture live traffic (not stale HAR / response echo), JSON field order matters for byte-identical bodies, run requests inside the real logged-in tab to clear bot protection, and don't rebuild state the server already assembles from a parent id.