Silent refresh reacts to other embedded iframe events

[davidmccoy-8451]

Describe the bug
"wrong origin requested silent refresh!" is logged when an iframe embedded on my page emits a "message" event

Stackblitz example
Provide a minimal stackblitz based example that shows the issue. For this, you can use the example application of this repo and the identity providers used here.

Lazy rn but could add if investigation requires it

To Reproduce
Steps to reproduce the behavior:

1. Embed an iframe on a page that dispatches an event with a "message" type
2. Trigger a silent refresh
3. The silent refresh event listener is reacting to any event with a "message" type, which is too broad?
4. The event's origin is from the iframe which has a different domain than the web app, and the "wrong origin" console error is logged

Expected behavior
The silent refresh event listener has a more narrow definition for events it reacts to.

Desktop (please complete the following information):
N/A