v1.17.4

browser_click returns candidates on strict-mode violation; auth_check_logged_in reads localStorage/sessionStorage (+ storageKeys param); DEBUG_DISABLED message is actionable; Ably 401/token-refresh console noise muted; DOM snapshot emits data-testid + aria-label. 776 core + 56 CLI tests green.