feat(idaa): auto-show sys menu for trusted users in iframe mode

Trusted admins embedded in the Novi iframe can't append show_menu=true
to the src URL, so watch trusted_access reactively and unhide the sys
bar automatically when they authenticate.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

src/routes/idaa/+layout.svelte

@@ -206,6 +206,15 @@ $effect(() => {
     }
 });
 
+// When in iframe mode, the sys bar is hidden by default (it's nav chrome the host page
+// doesn't need). However, trusted admins should still get the menu — they can't update
+// the iframe src to pass show_menu=true, so we watch for trusted_access and unhide it.
+$effect(() => {
+    if (browser && $ae_loc.iframe && $ae_loc.trusted_access) {
+        $ae_loc.sys_menu.hide = false;
+    }
+});
+
 $effect(() => {
     if (
         $ae_loc.iframe &&