Hi Jared, thank you so much for sharing this!
I was actually tinkering with my Muse headset this evening, pretty much following the steps (recording HCI snoop log, opening in Wireshark, then trying to figure out the protocol), and just when I figured out how to use the control characteristic, I decided to google it, in order to see if someone has already figured it out. Apparently, you did :)
The information in your post is very valuable for me, as I am planning to create a small JavaScript library that will connect to the headset using Web Bluetooth and will provide access to the raw EEG data. Alex Castillo and I are planning to pair and work on it during Ngcruise next week.
How is it going with your stress reduction project? Have you managed to get it to work with the headset?