smava Kundenbereich — PoC victim clone

This page reproduces the teal cross-frame RPC exactly as shipped in home.smava-shared.de (tracking-8cd8f5c0.js). It mounts the same responders that the authenticated portal registers when the loan-funnel iframe (TaurineScreen) renders, and seeds a victim session token in localStorage (as the app's zustand-persist store does).