Fake tenant page

This stands in for a tenant's own website. It embeds the loader and, like a real tenant backend integration would, registers a token provider via window.APLG_WIDGET.setTokenProvider(...). The launcher bubble should appear bottom-right; clicking it opens the panel iframe, and only then is the JWT issued and passed through the aplg:ready → aplg:init handshake.