fix(web-access): 开发者工具类动作指向 BrowserDevtools，兼容拆分前的客户端（3.4.5） (#206)

desirecore/desirecore#3899 把 BrowserAct 的 21 个开发者工具类动作拆到独立工具 BrowserDevtools，它不随本技能注入。技能在工具表后说明：需要时先 DiscoverTools(query="select:BrowserDevtools") 加载，参数与 BrowserAct 相同；查不到说明客户端早于拆分，同样的 action 与参数在 BrowserAct 上调用。写法不依赖客户端版本，所以不设 required_client_version，也不把 BrowserDevtools 加进 provides.tools。

references/browser-tools.md 新增 BrowserDevtools 一节，cdp.raw 的已知边界、错误处理与调用链路同步更新。技能版本 3.4.5，sidecar 的 release.version 与 catalogUpdatedAt 同步，i18n source_hash 重算。

English: Point web-access's developer-tool actions at BrowserDevtools, the
tool split out of BrowserAct in desirecore/desirecore#3899. The skill loads
it on demand through DiscoverTools and falls back to the same action on
BrowserAct for clients that predate the split, so no client version floor
is needed. Bump to 3.4.5 with synced sidecar metadata and a recomputed i18n
source hash.

验证 / Validation: i18n validation and catalog metadata checks report zero
errors (existing repository warnings remain); translation freshness check
passes.

skills/web-access/SKILL.md

@@ -15,7 +15,7 @@ description: >-
   新闻、网址、URL、找一下、搜一下、查一下、小红书、B站、微博、飞书、Twitter、
   推特、X、知乎、公众号、已登录、登录状态。
 license: MIT
-version: 3.4.4
+version: 3.4.5
 type: procedural
 risk_level: low
 status: enabled
@@ -43,7 +43,7 @@ provides:
     - LocalBookmarks
 metadata:
   author: desirecore
-  updated_at: '2026-08-29'
+  updated_at: '2026-10-03'
   i18n:
     default_locale: en-US
     source_locale: zh-CN
@@ -55,14 +55,14 @@ metadata:
       short_desc: 联网搜索、网页抓取、内置受管浏览器登录态访问与取文、研究调研工作流
       description: 联网访问工具包——搜索公开页面、Jina 优化抓取、内置受管浏览器完成登录态访问与取文，以及用户点名时接管他自己的 Chrome/Edge/Chromium。
       body: ./SKILL.zh-CN.md
-      source_hash: sha256:c8c7be6cf577d445
+      source_hash: sha256:5a2d3f06ce8eca10
       translated_by: human
     en-US:
       name: Web Access
       short_desc: Web search, page fetching, logged-in access via the governed built-in browser, research workflows
       description: A web-access toolkit — search public pages, fetch heavy pages via Jina Reader, reach and read logged-in sites through the governed built-in browser, and drive the user's named Chrome/Edge/Chromium over CDP on request.
       body: ./SKILL.md
-      source_hash: sha256:c8c7be6cf577d445
+      source_hash: sha256:5a2d3f06ce8eca10
       translated_by: human
 market:
   icon: >-
@@ -124,6 +124,8 @@ When you call `Skill('web-access')`, the following tools are injected into the c
 | SitePatternRead / SitePatternWrite | Per-domain "site experience" (AgentFS three-layer) |
 | LocalBookmarks | Search local Chrome bookmarks / history |
 
+> **Developer-tool actions are not in the table above**: network observe / intercept / modify and network profiles, cookies and site storage, console reads, performance metrics, coverage, cache, service workers, extensions, tracing, opening DevTools and raw CDP (`cdp.raw`) belong to a separate `BrowserDevtools` tool on newer clients, and this skill does not inject it. When you need one, first call `DiscoverTools(query="select:BrowserDevtools")` to load it; its parameters match BrowserAct (`action` + `sessionId` / `tabId` + `params`). If it is not found, the client predates the split: call the same action with the same parameters on `BrowserAct`.
+
 > **Important**: before `Skill('web-access')` is called, none of these tools appear in the LLM tools list — default conversations don't pay their token cost. See [references/browser-tools.md](references/browser-tools.md).
 >
 > **Removed in v2.1**: `BrowserListTabs` / `BrowserNavigate` / `BrowserEval` / `BrowserClick` / `BrowserScreenshot` / `BrowserScroll` / `BrowserSetFiles` / `BrowserCloseTab` and the cdp-proxy behind them are retired. Calling them now returns "该旧 BrowserXxx/cdp-proxy 入口已停用". This skill version requires client v10.0.128+; `page.extract-text` / `page.element` / `page.wait` / inline wait blocks / cross-origin iframe snapshots were introduced in v10.0.112+, and `BrowserScript` needs a build containing S17/S18.