Add safe Bubble session export path for CSOC-WP-0001-T02

Document XDG/OpenBao credential custody (no secrets in chat) and add
Playwright inventory export using storage-state for automated read access.

scripts/export-bubble-session.sh

@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+# Authenticated Bubble inventory export (CSOC-WP-0001-T02).
+# Uses storage-state only — never prints secrets.
+set -euo pipefail
+DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+ROOT="$(cd "$DIR/.." && pwd)"
+cd "$DIR"
+if [[ ! -d node_modules/playwright ]]; then
+  echo "Installing playwright in scripts/ …"
+  npm install
+  npx playwright install chromium
+fi
+exec node ./export-bubble-inventory.mjs "$@"