fix(ci): add playwright snapshots to whitelist and install chromium for webkit tests

1. Whitelist: Add tests/ui_tests/playwright/tests/*-snapshots/*.png to
   allowed patterns and suspicious file type exclusions

2. Webkit workflow: Install both chromium and webkit browsers since the
   auth setup step requires chromium even when running Safari tests

.github/scripts/file-whitelist-check.sh

@@ -51,6 +51,7 @@ ALLOWED_PATTERNS=(
 "installers/.*\.(bat|ps1|iss|ico)$"
 "docs/images/.*\.(png|jpg|jpeg|gif|svg)$"
 "src/local_deep_research/web/static/favicon\.png$"
+"tests/ui_tests/playwright/tests/.*-snapshots/.*\.png$"
 )
 
 # Get list of files to check
@@ -245,7 +246,7 @@ elif echo "$file" | grep -iE "\.(log|tmp|temp|cache|bak|backup|swp|swo|DS_Store|
 SUSPICIOUS_FILETYPE_VIOLATIONS+=("$file (temporary/cache)")
 elif echo "$file" | grep -iE "\.(png|jpg|jpeg|gif|bmp|tiff|svg|ico|webp)$" >/dev/null; then
 # Images are suspicious unless in specific directories
-if ! echo "$file" | grep -qE "(docs/|\.github/|installers/.*\.(ico|png)$)"; then
+if ! echo "$file" | grep -qE "(docs/|\.github/|installers/.*\.(ico|png)$|tests/ui_tests/playwright/tests/.*-snapshots/)"; then
 SUSPICIOUS_FILETYPE_VIOLATIONS+=("$file (image file)")
 fi
 elif echo "$file" | grep -iE "\.(mp3|mp4|wav|avi|mov|mkv|flv|wmv|webm|m4a|ogg)$" >/dev/null; then

.github/workflows/playwright-webkit-tests.yml

@@ -59,7 +59,8 @@ jobs:
       working-directory: tests/ui_tests/playwright
       run: |
         npm ci
-        npx playwright install webkit --with-deps
+        # Install chromium for auth setup step + webkit for Safari tests
+        npx playwright install chromium webkit --with-deps
 
     - name: Setup test directories
       run: |