Install into the desktop profile and diagnose browser delivery

The host half is confirmed working end to end: the ledger holds 24 calls
and the authenticated route returns a real total (6.42 RUB, 14 calls, all
attributed, zero unpriced or unattributed). The plugin is present in the
browser boot manifest, so its bundle is served.

Remaining issue is browser delivery only: the pill stays silent, and the
client swallows the transport error. Recon scripts added to pin down
whether the route answers 200, 401 or 404 from the page origin.

package.json

@@ -28,6 +28,6 @@
     }
   },
   "peerDependencies": {
-    "@deepseek-ai/dsh": "^0.2.0-rc.2"
+    "react": "^18.0.0"
   }
 }