fix(embed): Spotify directly as bare iframe (instant, no API wait)
The Spotify iFrame API bundle often fails to initialise in practice (CDN
gating), and their player cannot be skinned anyway. Therefore with Spotify
show the bare iframe immediately instead of waiting for the API → instant
rather than seconds of "sluggishness". CSP whitelist + 4s timeout (previous
commit) remain as a fallback for those who do get the API. buster
embed-player.js?v=6.
Co-Authored-By: Claude <noreply@…>