Add: httpOnly cookie support

[liyuankui]

Summary

• Add cookies CLI command for reading cookies through CDP, including HttpOnly flags and full cookie metadata
• Main branch has basic cookies support in daemon (cmdGetCookies), but only returns 4 fields (name, value, domain, path)
• This PR adds CLI access + extends to full metadata (httpOnly, secure, sameSite, expires)
• Avoid attaching default page before tab_* and cookies, preventing Arc timeouts on non-page-first target lists

What changed

• Add cookies get|getByName|httpOnly to CLI
• Extend shared response types with full cookie payloads (not just 4 fields)
• Fetch cookies through page WebSocket via Network.getCookies
• Handle tab list and cookies before default page attach

Comparison with main branch

Feature	Main branch (daemon only)	This PR (CLI)
CLI access	❌ No	✅ Yes
HttpOnly field	❌ No	✅ Yes
Secure field	❌ No	✅ Yes
SameSite field	❌ No	✅ Yes
Expires field	❌ No	✅ Yes
Subcommands	❌ No	✅ getByName, httpOnly filter

Validation

• npm run build
• npm test
• bb-browser --port 9222 --json tab list
• bb-browser --port 9222 --tab <tab-index> --json cookies httpOnly
• bb-browser --port 9222 --tab <tab-index> --json cookies getByName <cookie-name>

Locally re-checked with the bb-browser CLI form against an Arc instance on port 9222.

Closes #57