I want a browser that allows first-party cookies, but auto-expires them if I don't visit the domain for an hour. It should also only allow one level of requests (i.e. if a site requests a resource, that resource cannot request additional resources from other domains).

The latter part won't prevent bad behavior, but it will force that behavior to be proxied -- which carries technical, financial and legal implications that will cause companies to be more careful about their downstream redirects.