feat: 4 banner check upgrades — 30 CMPs, stealth, Shadow DOM, categories

1. 30 CMP selectors (was 10): Added Sourcepoint, Iubenda, Complianz,
   CookieFirst, HubSpot, Osano, Piwik PRO, Cookie Consent (Insites),
   Axeptio, Termly, CookieScript, Civic UK, GDPR Cookie Compliance,
   CookieHub, Ketch, Admiral, Sibbo, Evidon, LiveRamp, Adsimple.
   Plus improved generic fallback: role=dialog, aria-label, data-* attrs.

2. Playwright stealth mode: playwright-stealth against bot detection.
   Removes WebDriver flag, simulates plugins, realistic viewport/locale.
   Launch args: --disable-blink-features=AutomationControlled.

3. Shadow DOM: Recursive JS-based search through shadowRoot elements
   for consent banners. Fallback click via page.evaluate() when
   normal Playwright selectors can't penetrate Shadow DOM.

4. Category selection UI: User can choose which cookie categories to
   test (Notwendig, Statistik, Marketing, Funktional, Praeferenzen).
   Pill-style checkboxes in BannerCheckTab, forwarded through API chain.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

consent-tester/main.py

@@ -34,6 +34,7 @@ app.add_middleware(
 class ScanRequest(BaseModel):
     url: str
     timeout_per_phase: int = 10  # seconds to wait after page load
+    categories: list[str] = []  # empty = test all categories
 
 
 class ScanResponse(BaseModel):
@@ -59,7 +60,7 @@ async def health():
 async def scan_consent(req: ScanRequest):
     """Run 3-phase consent test on a URL."""
     logger.info("Starting consent test for %s", req.url)
-    result = await run_consent_test(req.url, req.timeout_per_phase)
+    result = await run_consent_test(req.url, req.timeout_per_phase, req.categories)
 
     # Build raw response dict for structured check mapping
     phases = {