Expose browser pool Chrome policy

[IlyaasK]

Summary

• expose computed normalized chrome_policy JSON on kernel_browser_pool
• confine map[string]any to the raw SDK response boundary
• canonicalize key order and API-style numeric values without HTML escaping
• treat omission and explicit null as absent policy for managed-resource compatibility
• reject non-object response values
• update generated Registry docs

Scope

Additive v1 durable read state only. No runtime/session fields. Live acceptance remains separate.

Tests

Ran repeated focused tests, race tests, full short suite, vet, gofmt, module checks, Terraform example fmt, docs drift, and diff checks.

Coverage includes Framework state roundtrip, deterministic nested JSON, HTML-sensitive characters, numeric canonicalization, omission/null, and non-object rejection.

Additional quality verification

• Gremlins: 44/44 mutants killed; targeted semantic mutations: 2/2 killed
• browser-pool data-source coverage: 93.8%; maximum CRAP score: 15.0
• Godog stack suite: 7 scenarios / 21 steps passed, including the @pr79 Chrome-policy normalization scenario

---

Note

Low Risk
Additive computed read-only attribute on a data source with no write or auth paths; behavior is covered by focused tests.

Overview
Adds a computed read-only chrome_policy string on the kernel_browser_pool data source so Terraform can surface Chrome enterprise policy overrides from pool config.

API policy JSON is unmarshaled and re-encoded into canonical JSON (sorted keys, integers normalized from floats, SetEscapeHTML(false) so URLs and markup stay literal). Missing field and explicit null both map to null in state; arrays or scalar values produce invalid-response diagnostics.

Registry docs and unit tests cover schema wiring, end-to-end read, normalization, and rejection of non-object policies.

^{Reviewed by Cursor Bugbot for commit 42dcc73. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit af40ac2. Configure here.}