feat: rename allowed_pubkeys to allowed_npubs with normalization

- Config now accepts npub format only (human-readable)
- Automatically converts npubs to hex pubkeys at load time
- Updated InterceptorOptions.AllowedPubkeys -> AllowedNpubs
- Added validation to reject hex format in config (npub only)
- Updated documentation to clarify npub-only config
- Added comprehensive tests for npub normalization

Config is for humans (npub), internal code uses hex pubkeys.

1 files changed, 17 insertions, 0 deletions

diff --git a/.ship/service b/.ship/service
new file mode 100644
index 0000000..9305ef4
--- /dev/null
+++ b/.ship/service
@@ -0,0 +1,17 @@
+[Unit]
+Description=nostr-grpc
+After=network.target
+
+[Service]
+Type=simple
+User=nostr-grpc
+WorkingDirectory=/var/lib/nostr-grpc
+EnvironmentFile=/etc/ship/env/nostr-grpc.env
+ExecStart=/usr/local/bin/nostr-grpc -db relay.db -grpc-addr localhost:50051 -ws-addr localhost:8006 -public-url nostr-grpc.x.bdw.to
+Restart=always
+RestartSec=5s
+NoNewPrivileges=true
+PrivateTmp=true
+
+[Install]
+WantedBy=multi-user.target