Phase 2: prove the Compass login + one-child fetch via patchright

- add scripts/compass-fetch-patchright.mjs: headless patchright logs in with the
  parent account (no 2FA) and stores the per-child pages with a sha256 manifest
- add scripts/package.json + lockfile for the patchright dependency
- docs: the harness clears the Cloudflare GET but not the login POST; patchright
  passes it; record the real per-child URLs and the overdue counts

Co-Authored-By: Paperclip <noreply@paperclip.ing>

scripts/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "compass-teams-nhs-scripts",
+  "private": true,
+  "type": "module",
+  "description": "Fetcher scripts for the Compass / NHS project.",
+  "dependencies": {
+    "patchright": "^1.64.0"
+  },
+  "scripts": {
+    "fetch": "node compass-fetch-patchright.mjs"
+  }
+}