Serve this from an allowed origin (e.g. http://localhost:4200) or the helper will reject it
(that rejection is itself a valid test). The desktop helper must be running and its loopback TLS cert trusted
(installed by the MSI, or by running provision-localhost-tls.ps1 as admin).