bios: retry stream:play without crossOrigin if CORS blocks load
The KPBJ stream (stream.kpbj.fm — vanilla Icecast 2.4.4) doesn't send
Access-Control-Allow-Origin headers, so setting audio.crossOrigin =
"anonymous" caused Chrome to reject the load with NotSupportedError and
the "no supported source was found" CORS failure seen in chat.
Keep trying with CORS first (r8dio via radio.co supports it, and we want
the analyser hooked up for frequency bars). If that attempt rejects, tear
down the tainted <audio> element and retry without crossOrigin so the
stream still plays — the visualizer gracefully falls back to the synthetic
wave+noise animation already wired up in chat.mjs and lib/radio.mjs.
Also cache-bust the URL with ?t=<now> on every play, matching the
approach used by kpbj.fm's own navbar player to avoid stale buffered
data on reconnect.