Pulse widget asset host

This origin serves widget.js and the hashed SDK bundles under /sdk/. The bundles point at the stage gateway and realtime hosts.

Same-origin smoke test: paste a contact_auth publishable key and load the widget.

<script src="https://<this-host>/widget.js" data-api-key="<key>" async></script>