test: use $WEB consistently and catch duplicate JS function names

The session-selector check reused a literal path instead of the
existing $WEB var and had no step label. Also add a check that no
top-level web/index.html function is declared twice -- the exact bug
class that shipped once already (switchSession/switchHerdrSession).