- recognize Auth0-style type=text username fields (not just type=email)
- fill via native value setter so React controlled inputs register the
  value (Auth0 'email required' despite filled field)
- bootstrap checkUrl tab when no site tab open before running steps
- entry picker prefers exact 'Sign In'/'Log In' over long matches
  (was clicking 'Bloomberg Anywhere Remote Login')
- iframe context matching skips the main frame first (same-host login
  iframes like bloomberg.com/account/iframe/signin were executing in
  the main frame and 'seeing' no form)
- new site recipes: statista.json (Auth0 two-step, verified live),
  bloomberg.json (two-step; auto-login still needs trusted-click
  engine support, signin iframe swallows synthetic DOM clicks)