docs(web): 422 lists every vendor, forbidden_shell, perimeterx_sensor, retry-time cap

[0xGhostCasper]

Documents what web-go now returns, live since 2026-10-15 11:05 UTC (scrapebadger #2526/#2528/#2529):

• 422 vendors: every protection vendor seen on the page, the block's own first (a site can put a Cloudflare challenge in front of PerimeterX). The 422 example gains the field.
• forbidden_shell in blocking_details.block_type: an HTTP 403 whose page is only scripts. It's an uncharged 422 now; it used to be billed as a success.
• perimeterx_sensor in antibot_systems: PerimeterX's sensor script on the page, which is not itself a block.
• 422 row: a request that runs out of time while retrying (about 165 s) gets this 422 instead of a gateway timeout.

🤖 Generated with Claude Code