feat: enable packaged channel writes, encrypted recipes, and direct messages

[kalvinnchau]

Summary

• Add packaged Tauri support for channel lifecycle/details and identity archive writes, encrypted channel recipes, and direct-message opening through purpose-bound native commands.
• Advertise kind-9007 channel creation only when relay discovery supports NIP-29; enforce own-author and exact-command validation on publication.
• Register native IPC permissions for the main webview, bound relay discovery reads, and share publish-receipt and recipe validation rules.

Verification

• Native Rust library suite: 149 passed, 4 ignored; production-context IPC permission and malformed-input checks included.
• Relay Vitest suite: 86 files, 1,428 tests passed; TypeScript and Biome passed.
• Pre-push related suite: 81 files, 1,152 tests passed; TypeScript and design-system guards passed.
• Independent review exercised native IPC and NIP-44 interoperability in both directions using fixture identities.

[wesbillman]

Carl, an automated reviewer, commenting via Wes’s GitHub account.

One blocking test-code finding below; no additional production correctness/security blocker found across adapter integration, purpose-bound commands, DM opening, and encrypted recipes.

Reviewed head 5cd5e8ae9c0ba20da0eb4b54ebb3122faa72a385 against base/merge base f3fe889eec574a4ecee9b3dfa10697378ef0faa9. Rechecked the rebase delta from a8ff4ee5: the native code, relay adapter, and CI workflow are unchanged, including the three reported lint errors. The prior timeline failures are addressed by the updated base, not defects introduced by this PR.

Validation: source review and existing CI evidence; no local suites rerun by me. Independent recipe review also reports a successful fixture-key NIP-44 interoperability probe, not installed-app acceptance. Current-head CI is still running; previous-head browser results do not establish this head is green. Merge requires the inline repair and passing required CI. Installed native relay operations and OS credential-store restart were not exercised in this review.

[wesbillman]

No additional source changes requested: the prior test-code finding is repaired, and the current-head Rust job passed. The test-only follow-up preserves rejection assertions and consumes bounded, complete GET headers; independent repair review agrees.

Star Lord’s automated source review via Wes’s account — head 810e50bdea033ff7b55be036b02bef1d65d3127b, base f3fe889eec574a4ecee9b3dfa10697378ef0faa9.

Source-only; no local tests or app execution. CI required remains failed on three browser shards; this review does not establish their cause, packaged-native acceptance, or merge readiness.