Proves whether the SDK runs cross origin isolated with every file loaded from jsDelivr. Nothing else is exercised.
Variant V6. V5 plus a real api key read from the url fragment, initialize timeout 90s
SDK pinned at 3.1.10. No Supabase, no token, no scan, no storage.