Phase 2: pi-browser-harness fetcher for Compass + Cloudflare/login findings

- scripts/compass-fetch.mjs drives pi-browser-harness (daemon socket) to log
  in once and store raw Compass pages with a sha256/byte-count manifest
- clear the Cloudflare managed challenge via a desktop-UA override plus an
  isolated browser context (the default HeadlessChrome UA loops the challenge)
- docs/phase-2-harness-notes.md records the harness entrypoint, the Compass
  login form, and the stored-page evidence
- gitignore local runtime state (var/, sqlite files)

Co-Authored-By: Paperclip <noreply@paperclip.ing>

.gitignore

@@ -38,3 +38,9 @@ local.properties
 
 # Pi agent generated memory (local state, not source)
 .pi/memory-vault/
+
+# Local runtime state: raw fetched pages, harness session, DB files (never commit)
+var/
+*.db
+*.db-wal
+*.db-shm