Add Sweep feedback, Pick to hide, and multi-step Undo

[neuralnexus]

Summary

• report direct Sweep actions and explicit no-op results, add the native Ctrl/Command+Shift+Y shortcut, and retain up to 10 newest-first Undo actions
• add one-shot Pick to hide with pointer, keyboard, and touch controls; protected-target policy; trusted-input shielding; focus restoration; and no selector, page text, route URL, or browsing-history persistence
• fail Pick closed unless the browser exposes both closed-shadow-root inspection and Navigation API entry identity; automatic blocking, Sweep, settings, and Undo remain available on the lower browser baseline
• harden Pick against route changes, top-layer races, lost pointer release, reactive target replacement, copied/detached targets, late closed roots, page-owned style changes, and immediate automatic re-hiding after Undo
• require explicit confirmation before enabling irreversible legal-control auto-accept
• keep settings authoritative in device-local storage, safely migrate legacy sync data, preserve future migration markers, and remove obsolete sync copies through one serialized background writer
• release as 0.8.0 with only storage and activeTab extension permissions
• build byte-reproducible Chrome, Firefox, and CRX3 artifacts with exact package validation, signer verification, lease-scoped staging, crash-recoverable publication journals, symlink rejection, process-identity fencing, and durable filesystem ordering
• generate and validate the Safari project through a serialized candidate workspace with isolated Xcode build data and deterministic app/extension version settings

Browser support

• Chrome/Edge 109+: Pick and all other features
• Firefox 140+: automatic blocking, Sweep, settings, and Undo
• Firefox 147+: Pick
• Safari 16.4+: automatic blocking, Sweep, settings, and Undo
• Safari 26.2+: Pick

Validation

• npm run validate (27 files, 336 tests)
• npm run test:e2e (49 Chromium tests)
• repeated npm run validate:packages produced identical artifacts:
  • Chrome ZIP: cf18e4ad1c19ebef101884f8f5499f17d02f0f7d84d46d66460ad76aacb2d29c
  • Firefox ZIP: add084f45db09a796833b45fcd51a92d21b8ab66ed98d382f07818d3f338fd4a
• fingerprint-pinned CRX3 builds with a review key were byte-identical: a3ddf2ceb48691ec1b2b1d72d20385f1c3bb2a9eb4cf7b9717feb826afe85728
• Firefox 140.0 ESR smoke: packaged add-on installed, automatic blocking and Sweep/Undo state passed, Pick correctly unavailable, and no extension runtime errors
• BYEBAR_SAFARI_BUILD_NUMBER=42 npm run validate:safari on Xcode 26.3: all Debug/Release target settings verified; unsigned macOS and generic iOS Release builds succeeded
• repeated independent picker, migration, artifact, and full-diff reviews completed with all blocker findings resolved

Manual follow-up

• run the fingerprint-pinned CRX build with the production release key before upload
• smoke-test Pick input shielding and toolbar behavior in Firefox 147+ and Safari 26.2+ before release