Phantom embedded-wallet signer-channel origin bypass — attacker origin drives the channel
A. frame wallet, NO forgery (log in here / control run)
B. forge "authorized"
C. forge "authorization-failed"
reset frame