ci: preserve browser QA completion budget

[BrickerP]

Why

Main run 29702560582 reached FIRST-PERSON BROWSER OK, then the 30-minute job limit cancelled it about 10 ms later. The Quality gate correctly blocked deployment.

Change

• reserve a 40-minute Browser QA job budget
• keep the required browser suite bounded at 35 minutes with TERM/KILL semantics
• preserve stdout/stderr in browser-verify.log while pipefail retains the real exit code
• lock job/step boundaries, failure propagation, and always-upload behavior with eight hostile CI-contract mutations

Verification

• npm run verify
• VITE_BASE=/ npm run build
• npm run verify:bundle
• npm run verify:dist
• npm audit --audit-level=low
• Ruby YAML parse
• git diff --check
• independent code review APPROVE; P0-P3 = 0
• independent AI-slop audit no-op; P0-P3 = 0