fix(cli): page closures survive keepNames transpilation; format motion-blur

Running the CLI from source (tsx dev script, as CI's smoke job does)
transpiles with keepNames, which rewrites named inner functions in
serialized page closures into __name(...) calls — a helper that exists
in the Node bundle but not in the browser realm. The unified seek
closure was the first validate-path page function with named inner
functions, so 'hyperframes validate' threw '__name is not defined' in
CI while the dist build worked. Every session opener now installs a
no-op __name shim via evaluateOnNewDocument before any page script
runs, immunizing all serialized closures regardless of build mode.

packages/cli/src/commands/layout.ts

@@ -28,6 +28,7 @@ import {
 import { findMotionSpec, readMotionSpec, type MotionSpec } from "../utils/motionSpec.js";
 import {
   AUDIT_SEEK_OPTIONS,
+  installPageFunctionGuard,
   seekCompositionTimeline,
   waitForCompositionFonts,
   type SeekCompositionTimelineOptions,
@@ -214,6 +215,7 @@ async function runLayoutAudit(
     });
 
     const page = await chromeBrowser.newPage();
+    await installPageFunctionGuard(page);
     await page.setViewport({ width: 1920, height: 1080 });
     await page.goto(server.url, { waitUntil: "domcontentloaded", timeout: 10000 });
     await alignViewportToComposition(page, server.url);

packages/cli/src/commands/validate.ts

@@ -15,6 +15,7 @@ import { resolveCompositionViewportFromHtml } from "../utils/compositionViewport
 import { c } from "../ui/colors.js";
 import { printDeprecationNotice, withMeta } from "../utils/updateCheck.js";
 import {
+  installPageFunctionGuard,
   resolveCliChromeGpuMode,
   seekCompositionTimeline,
 } from "../capture/captureCompositionFrame.js";
@@ -421,6 +422,7 @@ async function validateInBrowser(
     });
 
     const page = await chromeBrowser.newPage();
+    await installPageFunctionGuard(page);
     await page.setViewport(viewport);
 
     page.on("console", (msg) => {