[Linuxuser67]

Summary

• Replace the Options page's optimistic "Paired" label with distinct Saved, Verifying, Verified, Unverified, and unavailable states.
• Only show Verified after the background worker successfully performs its existing nonce/HMAC handshake with Grab.
• Make cookie permission status explicit and separate from cryptographic verification.
• Ignore stale verification responses when the code is edited, and avoid overwriting early user input while the initial storage read is pending.
• Move Grab's runtime status into the popup header between the title and Options gear, using a compact status dot, theme-aware colors, and accessible live status text.

Independent review

• Checked that the UI never treats code format or storage alone as proof of pairing.
• Checked status handling for wrong keys, an unavailable Grab server, unknown cookie permission state, input edits during a pending handshake, and the initial storage-read race.
• Added regression tests for pairing status transitions and popup header placement.

Validation

• JavaScript syntax check: passed.
• Firefox manifest synchronization check: passed.
• Node test suite: passed (including new pairing-status and popup-header regressions).
• CI run.