[kernel 697] extension: support web bot auth

[archandatta]

Note

Implements Chrome enterprise policy management, integrates it into extension uploads to force-install and allow hosts when required, adjusts container permissions, and adds an e2e test for web-bot-auth.

• Backend/API:
  • Integrates new policy.Policy into ApiService to manage Chrome enterprise policy at runtime.
  • Extends UploadExtensionsAndRestart to:
    • Detect if an extension needs enterprise policy via manifest.json (checks webRequest/webRequestBlocking).
    • Update /etc/chromium/policies/managed/policy.json with ExtensionSettings (force-install and runtime_allowed_hosts when required).
• Policy Library:
  • New server/lib/policy with read/modify/write helpers, AddExtension, RequiresEnterprisePolicy, and stable IDs via GenerateExtensionID.
• Images:
  • wrapper.sh (headful/headless): chown /etc/chromium/policies to kernel:kernel for runtime policy updates.
• Tests:
  • Adds e2e TestWebBotAuthInstallation to verify policy.json updates for a mock web-bot-auth extension.
• Defaults:
  • Updates shared/chromium-policies/managed/policy.json to initialize ExtensionSettings with wildcard entry.

^{Written by Cursor Bugbot for commit 9597ef4. This will update automatically on new commits. Configure here.}

[rgarcia]

one small change requested. Didn't realize there were no API to openapi.yaml so I don't think there will be any changes required to the public API!