MBS-6716: Replace tagger iframe with an img

Instead of using an iframe to inform the tagger, we now use a hidden
<img>. Under the latest browser specifications, <img> counts as
"mixed passive content", which is permitted to appear on a secure
connection, while iframes are "mixed active content" and blocked.
Merge branch 'mbs-6716' into beta