UX polish across the widget

Quick prompts render more cleanly, product cards flow as a carousel, popup navigation is preserved on sandboxed hosts, the user message pins in view, streaming stops chasing the scroll, and lead form validation is stricter.