Add no-upload browser-network smoke test

[SimpleZion]

Add a browser-level smoke test that opens the static scanner, loads fake samples, runs a scan, and confirms no user-loaded data is sent through fetch, XMLHttpRequest, sendBeacon, or form submission.

This is part of the local-first trust proof.