fix: preserve browser scroll position and configure commit attribution

[GCWing]

Summary

Browser clicks, input focus, screenshots, and pointer actions now reveal targets with minimal scrolling and use their visible center. Wheel actions respect overflow rules, avoiding displacement of hidden shell containers. A packaged desktop regression runner covers these interactions.

Built-in commit workflows now resolve the execution host's co-author preference when loaded. Quick Actions settings expose an opt-out, preserve legacy defaults and unrelated settings, and disable the control for older hosts that omit the field.

Type and Areas

Bug fix / feature. WebDriver adapter, browser tools, configuration contracts, built-in skill loading, Web UI settings, locales, and E2E helpers.

Motivation / Impact

Already-visible browser targets should keep their position when activated. Users can also choose whether new commits from the built-in workflow credit OpenBitFun as a co-author; the PR footer contract remains intact.

Verification

AI-assisted; focused automated validation completed:

• pnpm.cmd run fmt:rs
• pnpm.cmd run check:web
• pnpm.cmd run i18n:audit
• pnpm.cmd run check:core-boundaries
• node --test --test-name-pattern='third-party capability profiles' scripts/check-core-boundaries.test.mjs (1 passed)
• cargo check --locked -p openbitfun-webdriver
• cargo test --locked -p openbitfun-config-contracts --lib (94 passed)
• pnpm.cmd --dir src/web-ui run test:run src/infrastructure/config/services/AIExperienceConfigService.test.ts (10 passed)
• cargo test --locked -p openbitfun-core --no-default-features --features agent-runtime,tools-browser-web,tools-computer-use,git --lib runtime_settings:: (3 passed)
• Same Core target with browser_control::actions:: (23 passed, 1 existing real-browser test ignored)
• node --check tests/e2e/scripts/run-interaction-scroll.mjs
• git diff --check, git merge-tree --write-tree origin/main HEAD, and Git object size check passed.

The wider agentic::tools::implementations::skills:: filter produced 51 passes and one existing Windows failure: claude_scan_distinguishes_unsupported_fields_from_invalid_markdown uses a slash-specific string suffix assertion for a native path. This assertion and scanner behavior are unchanged by the PR.

Reviewer Notes

Prepared directly on gcwing/dev. Local audit/design/process documentation is excluded; the changed built-in commit-push-pr/SKILL.md is executable product content required by the new runtime setting.

Native/browser visual verification and the packaged E2E runner were not executed. Remote workspace, mobile/IM remote control, Peer Device Mode, and Detached Dispatch were not exercised end to end; no remote execution claim is made from the local tests.

Checklist

• Intended implementation and tests only; no audit reports, temporary artifacts, or unrelated documentation.
• Relevant validation and limitations recorded.
• New UI strings are present in all three Web UI locales; persisted legacy defaults and older-host handling are covered.