shadowRootUnl no longer exposed

[michaeleveringham]

Describe the bug:

The node.shadowRootUnl handle is no longer being exposed. The patch seems unchanged, however the https://camoufox.com/tests/shadowdom noted here #200 (comment) now gives an error:

playwright._impl._errors.Error: Page.evaluate: can't access property "querySelector", document.querySelector(...).shadowRootUnl is undefined

Tested on v135.0.1-beta.24 and the checkbox was checked.

Screenshots:

N/A

To Reproduce:

from camoufox import Camoufox

with Camoufox(headless=False, config={'forceScopeAccess': True}) as browser:
    page = browser.new_page()    
    page.goto('https://camoufox.com/tests/shadowdom')
    page.wait_for_timeout(2000)
    page.evaluate('document.querySelector("#shadow-host").shadowRootUnl.querySelector("input").click()')
    # Keep the page open to see checkbox action result.
    while True:
        pass

Version:

Python Packages                                                                      
  Camoufox                    v0.4.11                                                
  Browserforge                v1.2.4                                                 
  Apify Fingerprints          v0.13.0                                                
  Playwright                  v1.60.0                                                
Browser                                                                              
  Active                      official/stable                                        
  Current browser             v150.0.2-alpha.25   

[neuregex]

Still reproducible on v152.0.4-beta.25 (pythonlib 0.5.4).

Checked against a real closed shadow root:

• with config={'forceScopeAccess': True} → host.shadowRootUnl is undefined, so querying through it throws exactly as reported
• host.shadowRoot is null → confirms the root really is closed, i.e. this exercises the bypass rather than an open root
• without forceScopeAccess → also undefined (correct, no leak in that direction)

Worth noting how quiet this failure is: patches/shadow-root-bypass.patch still applies cleanly and the WebIDL binding is still generated, so the build stays green. The attribute simply stops materialising for page scripts, because the Func="Document::IsCallerChromeOrAddon" gate no longer sees a privileged caller — nothing short of driving a real browser catches it.

I have a regression test ready (tests/patches/shadow-root-bypass.py, same shape as the humanize ones) that pins both directions: reachable through shadowRootUnl with forceScopeAccess, hidden without it — since an always-on bypass would itself be detectable. It fails on main today and should go green with #685. Happy to open it as a PR once that lands, or now if you'd rather have the guard in first.