Fix unattended-capture tooling defects (#69, #70, part of #68)

[wolfgang-aura]

Fixes #69
Fixes #70
Refs #68

• Host keeps the capture lock (cliGone) after the request timeout until the extension replies or a 2 min hard cap; late and unknown-id replies log their viewUrl. captureShare races sendMessage against timeoutMs.
• A host that loses the pipe race retries listen every 3 s and reports host-status ok:true once it owns it.
• Launcher -Restart closes only the default-profile main process and stops only hosts with no live browser ancestor; trailing backslash, wildcard escaping, Chrome -Status exit 3.
• Low-severity defects from the 2026-10-07 full-repo review #68: CLI junction (realpath), --ping/--reload allowlist, proxy timeout reported as timeout, installer non-ASCII node path, metrics workflow warnings, MAIN-world history navigation message.

Skipped from #68: share-worker null body (other agent), items outside these files.

🤖 Generated with Claude Code