Align external marker span mapping (#63885)

* fix(markers): align external marker spans

* fix(browser): ssrfPolicy defaults fail-closed for unconfigured installs (GHSA-53vx-pmqw-863c)

* fix(browser): enforce strict default SSRF policy

* chore(changelog): add browser SSRF default + marker alignment entry

---------

Co-authored-by: Devin Robison <drobison@nvidia.com>

src/plugin-sdk/browser-subpaths.test.ts

@@ -13,6 +13,7 @@ describe("plugin-sdk browser subpaths", () => {
     expect(DEFAULT_OPENCLAW_BROWSER_ENABLED).toBe(true);
     expect(DEFAULT_BROWSER_DEFAULT_PROFILE_NAME).toBe("openclaw");
     expect(resolved.controlPort).toBeTypeOf("number");
+    expect(resolved.ssrfPolicy).toBeUndefined();
   });
 
   it("parses and redacts CDP urls on the dedicated CDP subpath", () => {