sdkStart directly from
the browser with a visible API key, for local/manual testing of any
agent in your tenant. In a real production embed, your own server
calls sdkStart and only passes the resulting session info
to the browser — the API key itself must never reach client code. See
apps/avatar-service/public/sdk/demo.html for the same
documented tradeoff on the existing avatar SDK demo. This is a
general-purpose sibling of tools/uitm-chat-widget — that
one stays hardcoded to UiTMbot's demo agent (id 3) with its own canned
prompts/citations; this one has none of that and works against any
agent id via the ?agentId= query param or the field
below.