host-electron + host-web: small robustness items from PR review

[pgherveou]

Various low-severity items from PR #104 review: WSProvider wrong sandbox default escape comment in createIframeHost, wasm setDebugEnabled optional-chain check, worker-protocol.test.mjs over-strict assertion, package.json wasm types export, README example using createUnavailableCallbacks instead of as never.