docs(agents): point the global AGENTS.md managed block at agent-browser

Discoverability follow-up to baking agent-browser into the base: agents won't
reach for a browser they don't know they have (the exact gap that made this
capability easy to miss). Add a short pointer section to the pi-devbox managed
block — capability, the preset AGENT_BROWSER_EXECUTABLE_PATH, and
`agent-browser skills get core --full` for the command set. Pointer only; depth
stays in the skill. rootfs change → folds into the same base-<hash> rebuild.
CHANGELOG note updated.

CHANGELOG.md

@@ -30,8 +30,10 @@ Pre-v1.0.0 tags followed the pi npm version (`v{pi_version}[letter]`).
   symlink, exported as `AGENT_BROWSER_EXECUTABLE_PATH`, insulates the config
   from Playwright's per-version `chromium-<rev>` directory name. Debian trixie
   `--with-deps` dependency resolution verified (the t64 renames are handled).
-  Adds ~960 MB (Chromium + headless shell). Base-affecting, rebuilds
+  The global AGENTS.md managed block
-  `base-<hash>`.
+  (`rootfs/usr/local/share/pi-devbox/pi-global-AGENTS.append.md`) gains a short
+  pointer so agents discover the capability. Adds ~960 MB (Chromium + headless
+  shell). Base-affecting, rebuilds `base-<hash>`.
 
 - **`pi-devbox-version` command.** Wraps `/etc/pi-devbox/build-manifest.json`
   into a human-readable summary (release tag, build date, source revision,

rootfs/usr/local/share/pi-devbox/pi-global-AGENTS.append.md

@@ -19,6 +19,18 @@ be discovered at runtime, never assumed. And interactive shell aliases
 tool, so spell out the underlying command (e.g.
 `ssh -F "$HOME/.ssh-local/config" mac …`).
 
+## Browser automation is available (agent-browser)
+
+This image bakes the **`agent-browser`** CLI plus a headless Chromium, so you can
+drive a real browser — open pages, click/fill/`eval`, snapshot the DOM, take
+screenshots — to **verify** front-end work (live DOM, WebGL, layout, popup
+positioning) instead of guessing. Reach for it whenever a task involves a web UI
+or checking how a page actually renders. `AGENT_BROWSER_EXECUTABLE_PATH` is
+preset to the baked browser, so `agent-browser open <url>` works out of the box
+(headless). Run `agent-browser skills get core --full` for the command set and
+workflow patterns (always version-matched to the CLI); the `agent-browser` skill
+under `~/.agents/skills/` mirrors it when the skillset is mounted.
+
 ## Session start: load the mempalace skill
 
 If MemPalace MCP tools (e.g. `mempalace_search`, `mempalace_diary_write`) are in