fix: chrome-cdp localhost-only binding

Restrict Chrome CDP to localhost by adding --remote-debugging-address=127.0.0.1
and --remote-allow-origins to prevent network-accessible debugging sessions.

Clears 1 Socket anomaly (Chrome CDP session exposure).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

bin/chrome-cdp

@@ -50,6 +50,8 @@ fi
 echo "Launching Chrome with CDP on port $PORT..."
 "$CHROME" \
   --remote-debugging-port="$PORT" \
+  --remote-debugging-address=127.0.0.1 \
+  --remote-allow-origins="http://127.0.0.1:$PORT" \
   --user-data-dir="$CDP_DATA_DIR" \
   --restore-last-session &
 disown