API_BASE isn't set yet — edit the constant near the top of the
<script> tag to your deployed Worker URL (see the backend README).
HAND-OFF CODE
0000
Send this code to whoever's receiving — that's the only key to this bucket. It's kept for 24 hours, or until they mark it collected.