Sandbox harness: create a ClearanceIntent, receive client_secret, open the embed UI that authenticates with that secret only (not the API secret key).
Status: idle