Agent Write Guardrails

One boolean on the click step decides whether the agent's browser launches at all

Webhands refuses any recipe containing a write-marked click until the caller resends it with confirm:true. That check runs before Cloudflare provisions a browser, so no mutation ever gets caught half-executed.