feat(research): R2 first pass — webcrack deobf of haven main.min.js

Ran webcrack on the captured PX12Ew76qT main bundle and added the
unwrapped output plus a survey note locating the collector POST cluster,
cookie name table, captcha URL builders, and the per-call yo() decoder.
Sensor field literals (appId, sid, vid, pc, en, seq, ft, bi, cs, hid,
pxhd, cts, ci, uuid, ti) are now grep-able in plain source.

Webcrack did not detect a bundler split, so the output is a single
17,135-line file rather than per-module sources. No anti-RE wrapper
fired (no self-defending, no debug-protection).

Gitignore: added `!px-research/deobf/**/*.js` to track derivative
deobf artifacts alongside the original init-js corpus.

Next moves are written into the survey note: sensor assembler bisect
(lines 8505–8681), bi= envelope decoder, yo() second-layer decoder,
cs= HMAC key search, and ped/haven bundle diff.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: KeyCode17

.gitignore

@@ -26,3 +26,4 @@ config/server.yaml
 !px-research/notes/**/*.md
 !px-research/sensor-maps/**/*.json
 !px-research/fingerprints/**/*.json
+!px-research/deobf/**/*.js