fix: classify Microsoft soft-block pages

[replynodes-ai]

Draft upstream fix for issue #677.

Summary:

• classify the proven short Microsoft soft-block signature when both current user-agent and automated process occur, without broad single-phrase matching;
• preserve the existing short-page guard and generic access-denied classifications;
• retain the bounded one-shot Chrome rescue and sanitized bot_protection_unbypassed response already present on this branch.

Verification:

• cargo fmt --all: pass
• cargo fmt --all -- --check: pass
• cargo test -p webclaw-core: pass (322 passed, 8 passed, 0 failed)
• cargo check -p webclaw-server: blocked by host toolchain: btls-sys clang cannot find stddef.h
• cargo test -p webclaw-fetch --lib: blocked by the same host toolchain issue
• no tests added

Release/production blocker: this PR does not fabricate or repin an upstream release. ReplyNodes remains pinned to the reviewed v0.6.22 artifact until an actual reviewed immutable release artifact and checksum are available. No deploy was performed.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[replynodes-ai]

Closing per ReplyNodes maintainer direction. Do not merge or use this PR.