feat: add an embed mode that shows only the globe

?embed=1 shows the globe alone: clean view with the HUD, panels, welcome and
setup prompts hidden, and provider attribution kept. The page that frames it
sends views with postMessage; the app applies each through its own actions
and reports every step. Annotations in any link are drawn once it restores.
Only embed-mode documents may be framed; every other page keeps
X-Frame-Options DENY and frame-ancestors 'none', and
GEV_EMBED_FRAME_ANCESTORS can restrict who frames them.

scripts/format-scope.json

@@ -890,5 +890,6 @@
   "src/tools/surfaces.test.mjs",
   "src/tools/places.test.mjs",
   "src/view/index.test.mjs",
-  "src/tools/views.test.mjs"
+  "src/tools/views.test.mjs",
+  "src/app/embed.test.mjs"
 ]