Loads @fluz/secure-elements via a plain <script src> tag and mounts real secure card inputs (renderFieldsForTokenization) against a running frame-host -- one combined frame holding pan/expiry/cvv together (a single VGS Collect form, needed for brand-aware CVV validation). Cardholder name is collected on this page directly (non-PCI), never framed; billing address is a hardcoded userAddressId for this demo. Mints a token and mounts automatically on page load.