console fill: never copy Google session cookies by default (device-bound); own profile in a Chrome started without automation switches

Google binds its session cookies to the device (Device Bound Session Credentials) and signs out
sessions whose cookies look stolen, which can sign the owner out of their real Chrome. The default is
now storebound's own profile per store; storebound starts Chrome itself (--user-data-dir,
--remote-debugging-port=0, no --enable-automation, navigator.webdriver false) and attaches over CDP.
--use-chrome-session google|apple is an explicit opt-in that warns. /signin/rejected is said plainly.

apps/desktop/src-tauri/src/commands.rs

@@ -261,7 +261,7 @@ pub fn dialog_labels(kind: Kind, title: &str) -> (String, String) {
 /// the uncertain ones marked for the owner, and the note that the owner reviews and saves in the browser.
 pub fn console_fill_dialog(project: &str, data: &Value) -> (String, String, String) {
     let title = data["title"].as_str().unwrap_or("Console form");
-    let mut s = format!("{title} · {project}\n\nA browser window opens on the console page. It uses your Chrome sign-in: storebound copies only your Chrome cookies for App Store Connect and Play Console into a temporary profile and deletes it when the window closes (passwords, history and extensions are never copied; macOS may ask once for Keychain access). If you are not signed in, sign in there yourself. storebound opens the form, fills the fields below and marks the ones you answer.\n\n{}\n", policy::CONSOLE_FILL_NOTE);
+    let mut s = format!("{title} · {project}\n\nA browser window opens on the console page. It uses storebound's own browser profile: the first time, sign in there yourself (storebound never types passwords); the sign-in is kept for the next runs. Your own Chrome's cookies are never copied (Google ties them to your device and could sign you out). storebound opens the form, fills the fields below and marks the ones you answer.\n\n{}\n", policy::CONSOLE_FILL_NOTE);
     let answers = data["answers"].as_array().cloned().unwrap_or_default();
     let mut lines: Vec<String> = answers
         .iter()

apps/desktop/src-tauri/tests/d3_writes.rs

@@ -72,7 +72,7 @@ fn console_fill_is_a_dry_run_from_the_window_and_its_dialog_lists_the_answers()
     assert_eq!(title, "Fill in console: Age rating");
     assert_eq!(ok, "Open the browser");
     assert!(text.contains("Prism Puddle") && text.contains(CONSOLE_FILL_NOTE));
-    assert!(text.contains("uses your Chrome sign-in") && text.contains("deletes it when the window closes"));
+    assert!(text.contains("uses storebound's own browser profile") && text.contains("cookies are never copied"));
     assert!(text.contains("- Cartoon violence: None") && text.contains("- Simulated gambling: you answer this"));
     let (_, empty, _) = console_fill_dialog("A", &json!(null));
     assert!(empty.contains("every field is yours"));

apps/desktop/src/i18n/en.ts

@@ -1300,7 +1300,7 @@ export const en = {
   'cf.panelTitle': 'Fill in console: {form}',
   'cf.disclaimer': 'Console pages change. This is AI-assisted: review every field in the browser and press the final button (Publish, Submit, Save or Create) yourself. storebound moves through the pages for you and never submits or publishes; App Privacy answers stay a draft until you press Publish.',
   'cf.notOpened': 'You chose Cancel in the dialog: no browser was opened.',
-  'cf.runningText': 'The browser is open with your Chrome sign-in (if it asks, sign in there yourself). storebound opens the form, fills the fields and marks the ones you answer. Review every field, press Save yourself, then close the browser.',
+  'cf.runningText': 'The browser is open with storebound\'s own profile (the first time, sign in there yourself; it is kept for the next runs). storebound opens the form, fills the fields and marks the ones you answer. Review every field, press Save yourself, then close the browser.',
   'cf.doneText': 'Browser closed. Filled: {filled}, marked for you: {highlighted}. Check in the console that your answers are saved.',
   'cf.closed': 'Browser closed.',
   'cf.cancelled': 'Stopped: the browser was closed.',

apps/desktop/src/i18n/tr.ts

@@ -1302,7 +1302,7 @@ export const tr: Record<keyof typeof en, string> = {
   'cf.panelTitle': 'Konsolda doldur: {form}',
   'cf.disclaimer': 'Konsol sayfaları değişebilir. Bu, yapay zekâ destekli bir yardımdır: tarayıcıda her alanı kontrol edin ve son düğmeye (Yayınla, Gönder, Kaydet veya Oluştur) kendiniz basın. storebound sayfalar arasında sizin yerinize ilerler, hiçbir zaman göndermez veya yayınlamaz; Uygulama Gizliliği yanıtları siz Yayınla\'ya basana kadar taslak kalır.',
   'cf.notOpened': 'İletişim kutusunda Vazgeç\'i seçtiniz: tarayıcı açılmadı.',
-  'cf.runningText': 'Tarayıcı Chrome oturumunuzla açık (isterse orada kendiniz oturum açın). storebound formu açar, alanları doldurur ve yanıtı size kalanları işaretler. Her alanı kontrol edin, Kaydet\'e kendiniz basın ve ardından tarayıcıyı kapatın.',
+  'cf.runningText': 'Tarayıcı storebound\'un kendi profiliyle açık (ilk seferde orada kendiniz oturum açın; sonraki çalıştırmalar için saklanır). storebound formu açar, alanları doldurur ve yanıtı size kalanları işaretler. Her alanı kontrol edin, Kaydet\'e kendiniz basın ve ardından tarayıcıyı kapatın.',
   'cf.doneText': 'Tarayıcı kapandı. Doldurulan: {filled}, sizin için işaretlenen: {highlighted}. Yanıtlarınızın kaydedildiğini konsolda kontrol edin.',
   'cf.closed': 'Tarayıcı kapandı.',
   'cf.cancelled': 'Durduruldu: tarayıcı kapatıldı.',