[ kehto/web ] fix(paja): prevent hidden consent from blocking napplet launch (#423)
Paja 0.33.0 put its shared Firewall modal inside collapsible developer controls. A hidden modal made the host inert while admission left the iframe blank. Allow a separate prompt mount and place Paja prompts on the host body while grant management stays in the sidebar.
Constraint: Preserve scoped admission and explicit user consent
Rejected: Auto-approve launch or expand saved controls | changes authority or presentation preferences
Confidence: high
Scope-risk: narrow
Tested: Build, type-check, 3371 unit tests, strict docs, 126 browser tests (one existing skip), AI-slop 100/100, live signed pointer and local-file launch
Not-tested: Production deployment after merge
https://github.com/kehto/web/commit/25311db2e41c60ad0708c1f6a3006b885cb73b01