Server fallback

Requests the policy routes to server run on your own OpenAI-compatible endpoint — nothing ships with this demo, no shared key, ever. Stored in localStorage. The endpoint must allow browser CORS from this origin (direct browser call, no proxy).