inline-embed-proof throwaway: proof that token-only Git-Data-API image embed renders inline in a browser
