feat: 增加共享 Agent Browser 调试能力

需求：在 AI 编程会话中让用户与 Agent 共享同一浏览器页面，并查看控制台与网络信息。

实现：新增沙箱浏览器内核、Host API/渲染器面板、OpenCode 工具接入及安全边界测试。

electron/api/server.ts

@@ -16,7 +16,9 @@ import { handleLogRoutes } from './routes/logs';
 import { handleUsageRoutes } from './routes/usage';
 import { handleFileRoutes } from './routes/files';
 import { handleMeowaGameAssetsRoutes } from './routes/meowa-game-assets';
+import { handleAgentBrowserRoutes } from './routes/agent-browser';
 import { sendJson, setCorsHeaders, requireJsonContentType } from './route-utils';
+import { rotateRendererCapability } from './renderer-capability';
 
 type RouteHandler = (
   req: IncomingMessage,
@@ -31,6 +33,7 @@ const coreRouteHandlers: RouteHandler[] = [
   handleAuthRoutes,
   handleImageWorkspaceRoutes,
   handleWorksRoutes,
+  handleAgentBrowserRoutes,
   handleUserSyncRoutes,
   handleOpencodeRoutes,
   handleSettingsRoutes,
@@ -62,6 +65,7 @@ export function getHostApiToken(): string {
 export function startHostApiServer(ctx: HostApiContext, port = getPort('NIANCODE_HOST_API')): Server {
   // Generate a cryptographically random token for this session.
   hostApiToken = randomBytes(32).toString('hex');
+  rotateRendererCapability();
 
   const server = createServer(async (req, res) => {
     try {