nh_login_preflight assumed the per-source Chromium was already running
(panel login-test failed silently for sources whose window had been
closed); extract nh_ensure_instance (no-op when alive) and use it in
both preflight and autodiscover. Harvests were unaffected — harvest.js
already runs ensure-chromium itself.