fix(web): BrowserList 状态标签 own-property 安全判断与断点 CDP 可见性断言

- Status 组件改用 Object.hasOwn 判定 statusLabels，constructor/toString/__proto__
  等原型键不再命中，仍回退「未知状态」并展示原始值
- 补充 vitest 参数化用例覆盖三个原型键
- Playwright 响应式烟测新增 900px/599px 断点 CDP endpoint 可见性断言，
  确认桌面表格与移动卡片分支各自只渲染一个可见 endpoint

HH-794

web/src/BrowserList.test.jsx

@@ -46,6 +46,14 @@ describe('BrowserList', () => {
     expect(rawStates[0].className).toContain('MuiTypography-caption')
   })
 
+  it.each(['constructor', 'toString', '__proto__'])('treats prototype key %s as an unknown state', async (state) => {
+    const protoRuntime = { ...runtimes[0], state }
+    render(<CoreAdminContext dataProvider={provider({ getList: vi.fn().mockResolvedValue({ data: [protoRuntime], total: 1 }) })}><BrowserList /></CoreAdminContext>)
+
+    expect(await screen.findAllByText('未知状态')).toHaveLength(2)
+    expect(screen.getAllByText(state)).toHaveLength(2)
+  })
+
   it('disables invalid lifecycle actions and sends explicit domain actions', async () => {
     const dataProvider = provider()
     render(<CoreAdminContext dataProvider={dataProvider}><BrowserList /></CoreAdminContext>)