iframe: listen first → tsdd.oauth.hello with * →
after tsdd.oauth.ready, pay with parent_origin only.
System browser: no 简聊钱包 channel. Host collects the pay password; this page
only sends prepay_id.
系统浏览器不展示简聊钱包渠道。
waiting for jump / session…