Headless has no distinct crawl identities

Hybrid -c spins browsers for throughput. That is not the same as Burp agents with separate cookie jars for anon vs authenticated (or two roles). One shared profile mixes session state and hides auth-only surface.

Add named agents with isolated data dirs, HeadlessAgents to run N identities, and a single-login conflict warning when credentials collide. Still force one agent with -cdd / -cwu.