Demo relying party: logs in through the RefineID extension over an approved RAPP session. No
card is involved yet; approval proves pair possession plus explicit consent at the proxy.
Not logged in. Pair your proxy first (extension popup shows the code).