External-partner harness served from (origin ). Verifies the test calculator iframe loads per country when embedded from an allowed parent origin.
Content-Security-Policy: frame-ancestors for this country's
citadele location block. Check the browser console for the CSP error.