feat(enrichment): harden Open Graph browser mode against anti-bot pages

[Innei]

Summary

• Stop the screenshot pipeline from capturing Cloudflare/Akamai challenge pages and from caching HTTP 4xx/5xx bodies as if they were normal HTML.
• Inject realistic UA, Accept-Language, and a stealth chromium arg on every agent-browser invocation.
• Replace the blind wait 1500 with wait --load networkidle (10s cap), then parse the main document request via network requests --status 400-599 so failures throw before the row enters the cache.
• Detect challenge pages by signature (title + first 8KB of html), retry once via reload, then throw a typed ChallengeBlockedError. Log challenge-error at info; reserve warn for unexpected fetch faults.

Spec: docs/superpowers/specs/2026-05-15-og-browser-hardening-design.md

Test plan

• `pnpm -C apps/core run test test/src/modules/enrichment/` — 237 / 237 pass (40 directly exercise the rewrite)
• `pnpm exec eslint` on changed files — clean
• `pnpm exec prettier --check` on changed files — clean
• Staging smoke against a known CF-protected URL (manual; not gated)

[safedep]

SafeDep Report Summary

No dependency changes detected. Nothing to scan.

View complete scan results →

_{This report is generated by SafeDep Github App}