* feat: fall back to ws://host:port/devtools/browser when HTTP discovery fails Chrome 136+ with UI-based remote debugging (chrome://inspect) exposes CDP over WebSocket but does not serve /json/version or /json/list HTTP endpoints. Add a third fallback in discover_cdp_url_with_timeout() that connects directly to ws://host:port/devtools/browser and verifies the endpoint with Browser.getVersion. Fixes #870 * chore --------- Co-authored-by: hyunjinee <leehj0110@kakao.com>