feat(security): enable Windows WebView2 password autosave

[WavesMan]

PR Description

Summary

Enable native WebView2 password saving and autofill for Pake apps on Windows.

Changes

• Add the --password-autosave CLI option and passwordAutosave config field
• Enable IsPasswordAutosaveEnabled on the app’s WebView2 Profile
• Disable password persistence when incognito mode is enabled
• Keep credentials isolated from Chrome and Edge profiles
• Update CLI schema, documentation, generated CLI output, and snapshots
• Add the required WebView2 COM interface dependency

Verification

• Rust cargo check
• Rust formatting check
• CLI configuration tests: 26 passed
• Windows application build completed successfully

Limitations

This uses the app-specific WebView2 Profile. It does not access Chrome/Edge password stores, account sync, Windows
PIN, or Windows Hello verification.

[tw93]

@WavesMan Thanks for the contribution. It is merged and shipped in pake-cli 3.17.3 as the opt-in Windows flag --password-autosave. I also made the off state explicit, so autosave is turned off on every window when the flag is absent and always off in private windows.

Saved passwords stay in that app's own WebView2 profile and are not shared with Edge or Chrome. Run npm install -g pake-cli@3.17.3 and rebuild with --password-autosave to use it.