Add Gmail+Email Worker hybrid mail path and private runtime config

Prefer Cloudflare Worker KV for verification codes with optional short IMAP
fallback disabled for private deploy; track config.json/.env for private repo.
Also add worker project, protocol mint backoff, and fail-fast Turnstile/mail
timeouts from batch runs.

turnstilePatch/content.js

@@ -1,5 +1,5 @@
 // Turnstile Patch - 隐藏自动化标识，加速 Turnstile 验证
-// 在 document_start 阶段执行，确保在页面脚本之前生效
+// MV3 MAIN world + document_start：在页面脚本之前修补真实页面上下文
 
 (function () {
     "use strict";
@@ -25,13 +25,15 @@
 
     // 3. 覆盖 permissions.query，隐藏 notifications 权限异常
     try {
-        var origQuery = navigator.permissions.query.bind(navigator.permissions);
-        navigator.permissions.query = function (params) {
-            if (params.name === "notifications") {
-                return Promise.resolve({ state: Notification.permission });
-            }
-            return origQuery(params);
-        };
+        if (navigator.permissions && navigator.permissions.query) {
+            var origQuery = navigator.permissions.query.bind(navigator.permissions);
+            navigator.permissions.query = function (params) {
+                if (params && params.name === "notifications") {
+                    return Promise.resolve({ state: Notification.permission });
+                }
+                return origQuery(params);
+            };
+        }
     } catch (e) {}
 
     // 4. 修补 plugin 数量，模拟正常浏览器