fix: add --ignore-gpu-blocklist to cloakserve for Docker WebGL support

cloakserve bypasses the wrapper and launches Chrome directly, missing
the GPU blocklist fix from 1380c86. Fixes #58.

bin/cloakserve

@@ -33,6 +33,9 @@ chrome_args = [
     "--disable-popup-blocking",
     "--disable-background-networking",
     "--metrics-recording-only",
+    # GPU blocklist bypass: Chromium blocks WebGL on software GPUs in
+    # Docker/Xvfb. Without this, WebGL vendor/renderer spoofing fails. #58
+    "--ignore-gpu-blocklist",
 ] + get_default_stealth_args() + sys.argv[1:]
 
 chrome = subprocess.Popen(chrome_args)