Attacker page
State:
idle
1. Prime paused-but-controllable MediaSession
2. PresentationRequest.start() (user gesture)