Mini-app runtime — cross-origin smoke test

Loads the runtime in a sandboxed iframe and verifies the mini-app:ready handshake. Run both Vite servers first:

npm run dev          # host on $APP_PORT
npm run dev:mini-app # runtime on $MINI_APP_PORT

Runtime origin: (unset)

clear saved state & reload