Runtime embed

Runtime bootstrap live wiring

F041 verifies that the embed route can request backend runtime bootstrap fail-closed, keep runtime tokens out of URLs/DOM/log evidence, and expose live/delayed/stale data status visibly.