Fix/prevent double login in iframe

[vaimdevs]

###Fix

• After data upload, exchange the user's JWT for a one-time token (OTT) via POST /api/v1/auth/jwt/ott/
• Append the OTT as ?token= in the iframe src URL
• Falls back gracefully if OTT exchange fails (logs warning, iframe still loads)