feat(h5): web 联网能力、实时查询路由与 session Finish 对齐

- 新增 web 能力并挂载 platform/web（web_search/fetch_url）
- 实时查询强制 web skill，router fallback 与 await session Finish
- Session Broker 覆盖率/指标、stream replay 与相关单测/E2E 脚本

Co-authored-by: Cursor <cursoragent@cursor.com>

session-broker.test.mjs

@@ -153,3 +153,29 @@ test('createSessionAccess with enabled=true routes through broker', async () =>
   assert.equal(resolved.origin, 'wechat');
   assert.equal(resolved.target, 'h5-direct');
 });
+
+test('createSessionBroker emits metrics when enabled', async () => {
+  const userAuth = createMockUserAuth();
+  const lines = [];
+  const broker = createSessionBroker({
+    userAuth,
+    metricsEnabled: true,
+    logger: { log: (line) => lines.push(line) },
+  });
+  await broker.registerSession({
+    userId: 'user-1',
+    sessionId: 'sess-metrics',
+    target: 'https://127.0.0.1:18006',
+  });
+  await broker.registerSession({
+    userId: 'user-1',
+    sessionId: 'sess-metrics',
+    target: 'https://127.0.0.1:18006',
+  });
+  assert.equal(await broker.validateOwnership('user-2', 'sess-metrics'), false);
+  await userAuth.registerAgentSession('user-1', 'sess-node-only', 2);
+  await broker.resolveSessionTarget('sess-node-only');
+  assert.ok(lines.some((line) => line.includes('register.duplicate')));
+  assert.ok(lines.some((line) => line.includes('ownership.denied')));
+  assert.ok(lines.some((line) => line.includes('resolve_target.miss')));
+});