Add a deterministic CookieStore with modern Set-Cookie parsing

Normalized profile

What this task asks for

Add a deterministic CookieStore with modern Set-Cookie parsing, cookie eviction, and request header handling. It must support extracting cookies from responses and applying the correct `Cookie` header to outgoing requests, while keeping existing cookie behavior unchanged unless `CookieStore` is used. `CookieStore` must accept optional limits `max_cookies` and `max_cookies_per_domain` (ints or None). When extracting, parse `Set-Cookie` headers and also support multiple cookies combined into one header value, including the common case where an `Expires=` attribute contains a comma. Enforce prefix rules when storing: `__Secure-` requires `Secure` and an https origin. `__Host-` additionally requires no `Domain` attribute and `Path=/`. Cookies added via mapping/list inputs or via `set()` with `domain=""` must be sent to any host that matches by path and scheme rules (they are not host-only cookies).