fix(browser): persist remote browser_vision screenshots locally

[sgaofen]

Summary

• stop passing Hermes-local screenshot output paths to remote cloud browser sessions
• copy the temp screenshot returned by agent-browser back into Hermes' managed cache before vision analysis
• add regression coverage for both cloud screenshot capture and unchanged local-mode behavior

Root Cause

browser_vision() always passed a local ~/.hermes/cache/screenshots/... path into the screenshot command and then immediately expected that same host path to exist. That works for local Chromium, but remote Browserbase/CDP sessions cannot write into WSL or other host-local filesystem paths.

Testing

• python3 -m py_compile /Users/stephenyu/Documents/hermes-agent-wt-11729/tools/browser_tool.py /Users/stephenyu/Documents/hermes-agent-wt-11729/tests/tools/test_browser_console.py
• uv run --directory /Users/stephenyu/Documents/hermes-agent-wt-11729 --extra dev pytest -o addopts='' /Users/stephenyu/Documents/hermes-agent-wt-11729/tests/tools/test_browser_console.py -q

Platform Tested

• macOS

Contribution Guide Notes

• keeps the fix scoped to browser_vision() and its regression tests
• resolves Bug: browser_vision screenshot fails on WSL2 with Browserbase remote backend #11729

[sgaofen]

CI note: the failing test check appears to be an unrelated upstream failure, not a regression in this browser_vision patch. This PR and #11750 are both red on the same test: tests/hermes_cli/test_opencode_go_in_model_list.py::test_opencode_go_appears_when_api_key_set, with the opencode-go model order coming back as ['kimi-k2.5', 'glm-5.1', 'glm-5', ...] instead of the asserted order. The browser-specific targeted regression suite for this change still passes locally (27 passed).

[teknium1]

Thanks for isolating the remote-screenshot failure and adding cloud/local regression coverage.

Problems

• The new cloud_provider is None check at tools/browser_tool.py:1963 does not cover direct CDP sessions. Current main accepts BROWSER_CDP_URL and browser.cdp_url as direct, non-local browser endpoints (tools/browser_tool.py:451-460, 781-785), but those have no cloud provider and would still receive the Hermes-host output path.
• The patch targets the pre-Lightpanda browser_vision layout. Current main has a separate Chrome pre-route and cache-copy path at tools/browser_tool.py:3953-4016; the salvage needs to preserve that flow.

Suggested changes

• Rework the capture-path decision against current browser_vision, covering configured cloud providers and direct CDP overrides, then copy the returned local temporary file into the managed screenshot cache.
• Add a direct-CDP regression alongside the provider-cloud and local cases.

Automated hermes-sweeper review.

[teknium1]

_get_cloud_provider() is None does not mean this session is local: current main supports direct BROWSER_CDP_URL / browser.cdp_url sessions, which are non-local but have no cloud provider. This branch would still pass the Hermes-host cache path to that remote CDP browser; cover the CDP override path too.