fix: extend CORS origins to comix and kagane, preserve progress on unparseable chapters

- .env.example, DEPLOY.md, docker-compose.yml: add comix.to/kagane.to to
  ALLOWED_ORIGINS so the userscript isn't CORS-blocked on either new site
- .env.example: comment out BROWSER_WS_URL's DNS-name default, which
  overrides the working compose default and 500s Chrome's DevTools handler
- userscript: updateToCurrentChapter() now falls back to the stored
  chapter/label when chapterNum is unparseable, instead of wiping progress
  (kagane's og:title lacks a number when a chapter has no episode suffix)
- README.md: document comix/kagane in the config table, adapter reference,
  and key examples

README.md

@@ -26,9 +26,10 @@ Bromite userscript (isolated world, Shadow DOM UI, localStorage cache)
 | Var | Default | Notes |
 |-----|---------|-------|
 | `API_TOKEN` | *(required)* | Bearer token shared with the userscript. |
-| `ALLOWED_ORIGINS` | Asura + Demonic origins | Comma-separated CORS allowlist. |
+| `ALLOWED_ORIGINS` | Asura + Demonic + Comix + Kagane origins | Comma-separated CORS allowlist. |
 | `DB_PATH` | `/data/bookmarks.db` | SQLite file location. |
 | `PORT` | `8080` | Plain HTTP; TLS terminated by the proxy. |
+| `BROWSER_WS_URL` | `ws://172.28.0.10:9222` | Headless-shell CDP endpoint used to poll Kagane past its JS challenge. Must be an IP or `localhost` — Chrome's DevTools handler 500s any other Host header. |
 
 ### Endpoints
 
@@ -40,8 +41,9 @@ Bromite userscript (isolated world, Shadow DOM UI, localStorage cache)
 | `GET` | `/healthz` | none | `200 ok`. |
 | `GET` | `/u/{token}/manga-bookmark.user.js` | token in path | Serves the userscript with an mtime-derived `@version`. |
 
-`key` is `<site>:<series_id>` — e.g. `asura:trash-of-the-counts-family-f886a8af`
-or `demonic:Infinite-Level-Up-in-Murim`. Sync is last-write-wins.
+`key` is `<site>:<series_id>` — e.g. `asura:trash-of-the-counts-family-f886a8af`,
+`demonic:Infinite-Level-Up-in-Murim`, `comix:12345`, or
+`kagane:3fa85f64-5717-4562-b3fc-2c963f66afa6`. Sync is last-write-wins.
 
 `updated_at` orders the bookmark list, so it moves only on real reading
 progress: the server applies its timestamp when the row is new or
@@ -200,6 +202,8 @@ The site adapters key everything off URL regex, with `title`/`cover` from
 |------|-----------|-------------|-------------|
 | **Asura** (`asurascans.com`) | `/comics/<slug-hash>` | `/comics/<slug-hash>/chapter/<n>` | `<slug-hash>` |
 | **Demonic** (`demonicscans.org`) | `/manga/<slug>` | `/title/<slug>/chapter/<n>/<page>` (`chaptered.php?manga=<id>&chapter=<n>` 301s here) | `<slug>` |
+| **Comix** (`comix.to`) | `/title/<id>-<slug>` | `/title/<id>-<slug>/<uploadId>-chapter-<n>` | `<id>` |
+| **Kagane** (`kagane.to`) | `/series/<uuid>` | `/series/<uuid>/reader/<bookUuid>` | `<uuid>` |
 
 Notes:
 - **`asuracomic.net` deep links are dead (re-checked 2026-07-25).** They 301 to