feat: add cloakserve CDP server mode for Docker

Add bin/cloakserve — launches stealth Chromium with remote debugging
enabled so users can connect via connect_over_cdp() from the host.
Uses socat to forward 0.0.0.0:9222 to Chrome's localhost-only CDP port.

Usage: docker run -d -p 127.0.0.1:9222:9222 cloakhq/cloakbrowser cloakserve

Tested: all stealth checks pass via CDP, bot.sannysoft.com 54/54,
reCAPTCHA 0.9, zero detection regressions.

.github/workflows/ci.yml

@@ -28,5 +28,7 @@ jobs:
           node-version: 20
       - name: Install and build
         run: cd js && npm install && npm run build
+      - name: Typecheck
+        run: cd js && npm run typecheck
       - name: Run tests
         run: cd js && npm test