Prove execution by making your injected JavaScript call /m03-p/api/solve/filter-bypass (e.g. with fetch()). No external collector needed. This server-rendered sink also auto-marks once a value that would clearly run is reflected/stored here.
The filter strips one specific tag and nothing else. HTML has many more than one way to run script - reach for a tag (and event handler) the blacklist never heard of.