Add authenticated designlang extract path for coulomb.social

Interactive Playwright session capture (XDG storageState, mode 0600)
plus a designlang pack wrapper that never prints secrets. Document the
intended OpenBao lane tenants/binky/coulomb-social/bubble-member for
later password custody; interactive capture is the default for Bubble.

scripts/capture-auth-state.sh

@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+# Wrapper so Node resolves playwright from scripts/node_modules.
+set -euo pipefail
+DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+cd "$DIR"
+if [[ ! -d node_modules/playwright ]]; then
+  echo "Installing playwright in scripts/ …"
+  npm install
+  npx playwright install chromium
+fi
+exec node ./capture-auth-state.mjs "$@"