fix(facebook): extract search results from role=feed entity links (#2090)

[LeoLin990405]

What

opencli facebook search returned notifications/stories/live rows instead of search results. Closes #2090.

Root cause

The extractor keyed on [role="article"] / [role="listitem"], which on modern facebook.com wrap left-nav and story chrome, not results. Results now render inside [role="feed"] as entity/content links (people/pages/groups/posts), and FB injects /search/ decoy anchors plus hidden-character noise.

Fix

• Convert the pipeline adapter to a func (like instagram [autofix] instagram/explore: empty result (explore_grid response shape drift) #2091) so the extraction is a testable buildFacebookSearchJs(). Same site/name/access/columns; preserves the facebook search template variables not substituted #625 navigate-before-extract order (asserted by invocation-order test).
• Scope extraction to [role="feed"].
• Exact-host filter via new URL(): keep only facebook.com / www.facebook.com, rejecting notfacebook.com (substring impostor) and l.facebook.com / lm.facebook.com redirect shims.
• Drop /search/ decoys.
• Preserve query-identity params for content URLs (*.php, /watch/) so photo.php?fbid=/story.php?/watch/?v= aren't broken; strip query for vanity paths.
• Conservative obfuscation filters (long spaceless digit tokens, spaced single-char decoys). The fuzzier ".com hidden-domain spam" filter was intentionally skipped to avoid false-dropping real results.
• Unwrap the Browser Bridge {session,data} envelope; CommandExecutionError on non-array payload.

Note: I can't verify against a live logged-in FB (anti-scrape), so the DOM shape / decoy patterns follow the autofix report — happy to iterate against real results (maintainer edits enabled).

Test

clis/facebook/search.test.js — 8 tests (jsdom fixture): real person+page entities kept; /search/ decoy + 16-digit token + spaced-single-char decoy + external + impostor host + redirect shim + out-of-feed nav all dropped; limit; empty feed; query-identity URLs preserved; bare-link text = anchor text; func #625 navigation order; envelope unwrap; non-array → CommandExecutionError.

Verification

• vitest run clis/facebook/search.test.js → 8 passed
• check:typed-error-lint / check:silent-column-drop → no new violations
• Codex review: ACCEPTED

[LeoLin990405]

Superseding this in favor of #2194.

When I opened this, facebook/search.js was still the old [role="article"]/[role="listitem"] extractor. Since then #2126 landed a more complete rewrite (role=feed scoping, auth detection, typed errors, a positive entity-href allowlist) that already covers the structural fix this PR aimed at — so rebasing this whole branch would only regress those improvements.

What #2126 didn't catch, and what I verified is still broken by offline reproduction, is narrower: result URLs were deduped/reported as origin + pathname, so query-identity destinations (permalink.php?story_fbid, story.php, watch/?v=) collapse different posts into one row; and l./lm.facebook.com redirect shims leak in as results. #2194 fixes exactly those on top of the current code, with regression tests. Closing this to keep the review focused there.