runtime update v 0.1.21 minor update

Thread body

Downloads got smarter. The runtime now mediates downloads through an action-based approval flow instead of blanket permissions, and handles approved blob/data downloads locally inside the iframe. Also squashed a race condition where a download would get approved but never actually fire — turns out the iframe policy needed a beat to propagate before the click would go through