Portal for CnC-delivered services. Hotel Barahi and similar properties are example client deployments. Public widget lives at src="/embed/" (same origin as this app). Open /embed/ to preview. Ensure the API allows your parent site in CORS_ORIGINS and nginx does not block iframing (see deploy/nginx-embed-snippet.conf).