If Foundry's login screen renders above, framing works and the session cookie is being sent —
both hosts sit under silverbasin.vegas, so the browser treats this as same-site.
If the panel is blank, open the console: a frame-ancestors error means the CSP is wrong,
anything else is Foundry itself.