feat(ghl): GHL site profile, google_sso flow, PIT macros, manual-fallback protocol

[arc-web]

Summary

• Add app.gohighlevel.com to site_registry with google_sso flow + 2FA/captcha detect selectors + per-domain click-speed policy
• Ship 7 dedicated GHL tools: ghl_auth_refresh, ghl_verify_session, ghl_switch_view, ghl_switch_subaccount, ghl_create_pit, ghl_list_pits, agentic_browser_send_prompt
• Fix browser_snapshot regression (Patchright dropped page.accessibility namespace; new DOM walker replaces it)
• Add reusable UI macro primitives: wait_for_hydration, extract_modal_text, tick_all_checkboxes, click_by_text
• New agentic_browser_prompt helper posts to Discord #agentic-browser (ARC server, Agents category) and waits for human reply or /tmp/<session>_resume flag - used by 2FA pauses, captcha handoffs, manual-fallback offers
• Add MANUAL_FALLBACK.md protocol: macros call agentic_browser_prompt on failure instead of silently falling back

Why

StackPack GHL PIT-creation flow surfaced gaps: no GHL site recipe, no PIT macro, broken snapshot, no human-pause hook. Full friction audit: ~/.claude/plans/arc_browser_ghl_gaps_and_improvements.md. P1 of arc-browser hardening v2 cycle.

Test plan

• Module import clean (python -m arc_browser.server registers 31 tools, was 24)
• All 7 new tools surface in MCP list_tools
• Live e2e ghl_create_pit("agency", "stackpack-full", "all") against GHL UI (next session)
• 2FA pause via real Google challenge (deferred until user triggers SSO challenge)
• Modal-token scrape against actual PIT-display modal (deferred until e2e)

Linked Tasks

• COMM-35 [Epic] arc-browser hardening v2
• COMM-36 GHL site_registry entry
• COMM-37 ghl_auth_refresh + ghl_verify_session
• COMM-38 ghl_create_pit macro
• COMM-39 modal-token-scraper helper
• COMM-40 browser_snapshot fix
• COMM-58 #agentic-browser Discord channel
• COMM-59 agentic_browser_prompt helper
• COMM-60 MANUAL_FALLBACK.md protocol

🤖 Generated with Claude Code

[arc-web]

Readiness review on 2026-05-19 JST:\n\n- Local branch: /Users/home/ai/tools/browser/arc-browser on claude/feat/arc-browser-ghl-v1, clean.\n- PR state: OPEN, mergeStateStatus CLEAN, head dbd53a1.\n- Static verification passed: /opt/homebrew/bin/python3 -m py_compile arc_browser/browser.py arc_browser/server.py arc_browser/utils/prompt.py.\n- Unit verification passed: /opt/homebrew/bin/python3 -m pytest -q tests/test_google_cloud.py, 4 passed.\n- Diff whitespace check passed: git diff --check origin/main..HEAD.\n- MCP smoke passed structurally: /opt/homebrew/bin/python3 scripts/smoke_mcp.py listed 31 tools and confirmed google-cloud helper tools registered.\n- Remaining risk: smoke output reports browser_camofox_health={"ok": false, "error": "sidecar not reachable at http://127.0.0.1:9377"}.\n- Remaining PR body gaps: live e2e ghl_create_pit("agency", "stackpack-full", "all"), real Google 2FA pause, and modal-token scrape are still unchecked.\n\nRecommendation: keep this PR open in Needs Approval until the Camofox sidecar/runtime path and live GHL e2e checks are verified, then merge if those pass.