v0.1.4

v0.1.4 — clicks that report what actually happened

Four fixes to the multi-step-form failure mode, all sharing one root cause:
a tool reported success because it dispatched an action, without checking the
action had any effect.

- find_and_click no longer clicks invisible or collapsed nodes, reports
  matched_total vs matched_visible, and uses the real isTrusted mouse path.
- click scrolls the target into view and hit-tests before pressing; an overlay
  is reported by name instead of swallowing the click.
- An orphaned SingletonLock is cleared when its pid is gone (and left alone
  when alive); Chrome's stderr is kept and carried in startup errors.
- login cross-checks a visible password field against an unchanged URL, and
  submits the form owning the password field.
- NEOBROWSER_INCLUDE_IDENTITY_COOKIES: opt-in identity-cookie escape hatch,
  requiring an explicit affirmative value.