feat: rename allowed_pubkeys to allowed_npubs with normalization

- Config now accepts npub format only (human-readable)
- Automatically converts npubs to hex pubkeys at load time
- Updated InterceptorOptions.AllowedPubkeys -> AllowedNpubs
- Added validation to reject hex format in config (npub only)
- Updated documentation to clarify npub-only config
- Added comprehensive tests for npub normalization

Config is for humans (npub), internal code uses hex pubkeys.

1 files changed, 18 insertions, 0 deletions

diff --git a/.ship/Caddyfile b/.ship/Caddyfile
new file mode 100644
index 0000000..88ed6d3
--- /dev/null
+++ b/.ship/Caddyfile
@@ -0,0 +1,18 @@
+nostr-grpc.x.bdw.to {                                                                                                                                                                       
+        # Route native gRPC to port 50051                                                                                                                                                       
+        @grpc {
+          header Content-Type application/grpc*
+        }
+        reverse_proxy @grpc localhost:50051 {
+          transport http {
+              versions h2c
+          }
+        }
+
+        # Everything else (Connect, WebSocket, HTML) to port 8006
+        reverse_proxy localhost:8006 {
+          # Enable WebSocket support
+          header_up Upgrade {http.request.header.Upgrade}
+          header_up Connection {http.request.header.Connection}
+        }
+}