Add Gmail+Email Worker hybrid mail path and private runtime config

Prefer Cloudflare Worker KV for verification codes with optional short IMAP
fallback disabled for private deploy; track config.json/.env for private repo.
Also add worker project, protocol mint backoff, and fail-fast Turnstile/mail
timeouts from batch runs.

turnstilePatch/manifest.json

@@ -1,15 +1,16 @@
 {
-    "manifest_version": 2,
+    "manifest_version": 3,
     "name": "Turnstile Patch",
-    "version": "1.0.0",
+    "version": "1.1.0",
     "description": "Patch browser automation detection for Turnstile",
     "content_scripts": [
         {
             "matches": ["<all_urls>"],
             "js": ["content.js"],
             "run_at": "document_start",
-            "all_frames": true
+            "all_frames": true,
+            "world": "MAIN",
+            "match_about_blank": true
         }
-    ],
-    "permissions": ["activeTab"]
+    ]
 }