Isolated synthetic publisher

IVTB external-origin acceptance

This page exercises the real staging CDN, CORS, token and event path from a separate origin.