fix(xiaohongshu): harden anti-detection flows

[Astro-Han]

Description

Harden Xiaohongshu adapters against common risk-control triggers without changing the framework layer.

This PR:

• disables redundant pre-navigation for the intended Xiaohongshu Strategy.COOKIE commands by setting navigateBefore: false
• randomizes fixed waits and adds light pacing between creator-side requests
• detects Xiaohongshu security-block pages in note, comments, and download, then throws CliError('SECURITY_BLOCK', ...) with actionable hints
• replaces the fixed comments scroll pattern with condition-based scrolling
• adds regression coverage for the new anti-detection behavior and manifest/runtime metadata

Related issue:

• Closes 小红书opencli问题 #962
• Related to [Feature]: 小红书搜索结果页，缺乏“筛选”能力 #903, this PR touches Xiaohongshu search/runtime hardening but does not add search filter support

Historical context:

• Also hardens failure patterns previously seen in [Bug] Xiaohongshu comments command returns empty due to anti-automation detection (error 300017) #557, [Bug]: 小红书无法抓取笔记正文 #660, 小红书封号了 #677, and xiaohongshu提示账号违规 #842

Type of Change

• 🐛 Bug fix
• ✨ New feature
• 🌐 New site adapter
• 📝 Documentation
• ♻️ Refactor
• 🔧 CI / build / tooling

Checklist

• I ran the checks relevant to this PR
• I updated tests or docs if needed
• I included output or screenshots when useful

Documentation (if adding/modifying an adapter)

• Added doc page under docs/adapters/ (N/A, existing adapter changes only)
• Updated docs/adapters/index.md table (N/A, no new adapter)
• Updated sidebar in docs/.vitepress/config.mts (N/A, no new adapter)
• Updated README.md / README.zh-CN.md when command discoverability changed (N/A, no discoverability change)
• Used positional args for the command's primary subject unless a named flag is clearly better
• Normalized expected adapter failures to CliError subclasses instead of raw Error

Screenshots / Output

$ npx tsc --noEmit
# exit 0

$ npm test
Test Files  196 passed (196)
Tests  1483 passed | 2 skipped (1485)

$ npm run build
✅ Manifest compiled: 550 entries

$ node dist/src/main.js validate
opencli validate: PASS
Checked 550 command(s)
Errors: 0  Warnings: 7

$ npx vitest run clis/xiaohongshu/navigation.test.js clis/xiaohongshu/note.test.js clis/xiaohongshu/comments.test.js clis/xiaohongshu/download.test.js clis/xiaohongshu/search.test.js clis/xiaohongshu/publish.test.js clis/xiaohongshu/creator-notes.test.js clis/xiaohongshu/creator-note-detail.test.js clis/xiaohongshu/creator-notes-summary.test.js
Test Files  9 passed (9)
Tests  76 passed (76)

Validation note:

• opencli validate reports 7 warnings total. The Xiaohongshu warning on publish is pre-existing and not introduced by this PR.