feat(server): let users withhold browser access from agents#7083

fix(web): include agent browser access in Restore defaults

fix(server): revoke the MCP credential when agent browser access is withheld

test(server): cover the agent browser access gate

feat(server): let users withhold browser access from agents