fix: strip existing sso param from clientUrl, add aria roles to dropdowns, add x-pathname fallback, move .dropdown-menu into @layer components

src/app/client/page.tsx

@@ -81,8 +81,9 @@ export default function ClientPage() {
 
   const getClientSrc = useCallback(() => {
     if (!ticket) return "";
-    const sep = clientUrl.includes("?") ? "&" : "?";
-    return `${clientUrl}${sep}sso=${encodeURIComponent(ticket)}`;
+    const base = clientUrl.replace(/(\?|&)sso=[^&]*/, "");
+    const sep = base.includes("?") ? "&" : "?";
+    return `${base}${sep}sso=${encodeURIComponent(ticket)}`;
   }, [clientUrl, ticket]);
 
   if (loading) {