test: enforce Tampermonkey Stage 3 evidence

[jackhai9]

Summary

• add a strict Stage 3 evidence schema and verification CLI for generated, installed, and CDP-loaded userscript identity
• verify current Tampermonkey wrapper boundaries, document-start ordering, visible panel state, and a reversible non-financial multiplier interaction
• record bounded CDP cleanup truthfully when a bridge cannot disable a domain

Validation

• npm test (335 passed)
• npm run test:ui (51 passed)
• npm run build:binance-orderbook-trade
• npm run check:binance-orderbook-trade
• git diff --check
• live Chrome/Tampermonkey capture on HYPEUSDT: generated and installed SHA-256 matched; the wrapped CDP source contained the exact artifact once; scriptParsed preceded DOMContentLoaded; panel was visible; multiplier restored 1 -> 2 -> 1; zero financial requests