State persistence across restarts

The weaker of agent-browser's two safety flags is the one that survives a restart

An end-to-end read of the browser-automation CLI found --pin-tab written to an fsynced sidecar file and re-read at startup, while --allowed-domains is seeded only from an environment variable that a reconnecting command never sets.