Two review findings. Safari's parser interpolated a bare IPv6 host into the
cookie URL (`http://::1/`), which Electron rejects; hosts with a colon are now
bracketed, matching the Chromium reader's cookieScope. And the cookie-database
candidate probes accepted any stat-able entry, so a directory squatting on
`Network/Cookies` would be picked, fail the SQLite open, and shadow a valid
legacy `Cookies` file behind it; every candidate probe now requires a regular
file, in the listing, the counts, and the importer alike.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>