Loads @fluz/secure-elements via a plain <script src> tag and mounts a real CardViewer against a running frame-host. Mints a token and mounts automatically on page load; use the button to remint and remount on demand (e.g. after an access-token refresh, or to retry a failed mount).