console: agent-first mode (console plan / console verify), verified App Privacy and Play Create app facts

- `storebound console plan <form> [--json] [--lookup]`: read-only plan for an AI agent that drives the browser
  itself: start URL (deep links), ordered steps, answer sheet with the console's exact labels (certain / ask owner,
  curly quotes noted), never-press list, verified UI facts, driving guidance (in-page async loop + window.__log),
  verify instructions. All six forms.
- `storebound console verify <form> [--from-text <file|->]`: App Privacy per-type summaries from page text, Play
  Create app from input states, content rating / target audience summaries, App Store record and age rating from
  the API; exit 1 on a mismatch.
- MCP: console_plan, console_verify (read-only); console fill stays off MCP.
- App Privacy (verified 2026-10-12): two information steps, unlabeled purpose checkboxes (nearest parent text),
  "Definitions and Examples" never pressed; fixture and engine follow.
- Play Create app (verified 2026-10-12): /developers/<id>/create-new-app, App package name + read-only Check
  availability, material-radio inner [role=radio] click, app dashboard URL and play.appId, service account
  "Add app" as an owner step.
- console-autofill skill rewritten agent-first; agents-core rule 10; README; pitfalls 12, 18 (confirmed sign-out),
  19; CHANGELOG; play-first-release.

.github/copilot-instructions.md

@@ -33,6 +33,13 @@ These rules apply to every AI tool that uses storebound (skills, MCP server or t
 9. **Personal data stays local.** Tester lists, review reply drafts, health reports and analytics snapshots live in
    `.storebound/` (gitignored). Never put tester emails, reviewer names or crash logs into issues, docs or commits,
    and never ask for tester emails in chat (storebound masks them in its output).
+10. **Console forms without an API: drive them yourself, agent-first.** `storebound console plan <form> --json` (MCP
+    `console_plan`) gives the start URL, steps, the answer sheet, the buttons you must never press and the verified UI
+    facts. Drive the page with your own browser tool, adapt to what it shows, run long flows as an in-page async loop
+    that writes `window.__log` (one evaluate call times out around 45 s), stop before the final button (Publish,
+    Submit, Create, a final Save) and tell the owner exactly what to press, then `storebound console verify <form>`.
+    Never sign in, accept an agreement or grant a permission (a service account's app access) for the owner.
+    `storebound console fill` is the optional scripted fast path; it never blocks you.
 
 ## Tools
 
@@ -56,7 +63,7 @@ These rules apply to every AI tool that uses storebound (skills, MCP server or t
 | `appstore-first-release` | Step-by-step first (and later) App Store release of a mobile app or game |
 | `aso-basics` | App store optimization basics for a mobile app's or game's text |
 | `build-and-sign` | Sign, build and upload a mobile app or game from the terminal |
-| `console-autofill` | AI-assisted autofill of App Store Connect and Google Play Console forms that have no API (the New App dialog, App Privacy, Play's Create app form, the Play IARC content rating questionnaire, Target audience and content plus the Ads declaration; the App Store age rating is shown as guidance because the API sets it) in a visible browser with storebound's own profile that the owner signs in to once (never a copy of the owner's Google cookies unless they opt in); storebound opens the form itself. Answers come only from storebound.config.ts; anything the config does not prove stays empty and highlighted. storebound moves through the pages itself (Next; App Privacy: Get Started, Edit, each data type and the draft Save; content rating: Save draft) and never signs in, submits or publishes: the owner presses the final button |
+| `console-autofill` | Fill App Store Connect and Google Play Console forms that have no API (New App, App Privacy, Play Create app, the IARC content rating, Target audience and content plus Ads; the App Store age rating is guidance because the API sets it). Agent-first by default |
 | `export-compliance` | Answer App Store export compliance (encryption) for a mobile app or game correctly |
 | `listing-localization` | Translate the store listing of a mobile app or game into more languages |
 | `migrate-from-fastlane` | Move a mobile app or game from fastlane (deliver, supply, snapshot / screengrab, Appfile, Deliverfile) to storebound with `storebound import fastlane` |