Cross-origin HTTPS iframe embeds as left-rail "Apps" items; standalone URLs stay chromeless. phuryn gets aiusage.hynesy.com behind CF Access; timelapse gets a Phase-1 palette/typography restyle. Targets alpha.27. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>