Per-domain auth bindings. Evaluated in array order — first match wins.
Order matters: specific domains should come before wildcard ["*"] fallback.
OptionalGlobalGlobal auth callback — runs once after browser launch, before the main loop. Use for complex flows that span multiple domains (SSO, MFA, OAuth redirects). Runs IN ADDITION to domain bindings, not instead of them.
Top-level auth configuration on RunComputerUseParams.
Contains both per-domain bindings and an optional global callback. These are NOT mutually exclusive — the global callback runs once after browser launch (for SSO/MFA), then per-domain bindings are applied lazily on first navigation to each domain.