Add serve mode, fix binary tags, document CLI tools, improve Docker

- Add 'serve' subcommand for ephemeral RAM-based relay at /dev/shm with
  open ACL mode for testing and benchmarking
- Fix e-tag and p-tag decoding to use ValueHex()/ValueBinary() methods
  instead of Value() which returns raw bytes for binary-optimized storage
- Document all command-line tools in readme.adoc (relay-tester, benchmark,
  stresstest, blossomtest, aggregator, convert, FIND, policytest, etc.)
- Switch Docker images from Alpine to Debian for proper libsecp256k1
  Schnorr signature and ECDH support required by Nostr
- Upgrade Docker Go version from 1.21 to 1.25
- Add ramdisk mode (--ramdisk) to benchmark script for eliminating disk
  I/O bottlenecks in performance measurements
- Add docker-compose.ramdisk.yml for tmpfs-based benchmark volumes
- Add test coverage for privileged policy with binary-encoded p-tags
- Fix blossom test to expect 200 OK for anonymous uploads when auth is
  not required (RequireAuth=false with ACL mode 'none')
- Update follows ACL to handle both binary and hex p-tag formats
- Grant owner access to all users in serve mode via None ACL
- Add benchmark reports from multi-relay comparison run
- Update CLAUDE.md with binary tag handling documentation
- Bump version to v0.30.2

.gitea/README.md

@@ -65,7 +65,7 @@ The workflow uses standard Gitea Actions environment variables:
 - **Solution**: Verify `GITEA_TOKEN` secret is set correctly with appropriate permissions
 
 **Issue**: Go version not found
-- **Solution**: The workflow downloads Go 1.25.0 directly from go.dev, ensure the runner has internet access
+- **Solution**: The workflow downloads Go 1.25.3 directly from go.dev, ensure the runner has internet access
 
 ### Customization
 

.gitea/workflows/go.yml

@@ -35,11 +35,11 @@ jobs:
 
       - name: Set up Go
         run: |
-          echo "Setting up Go 1.25.0..."
+          echo "Setting up Go 1.25.3..."
           cd /tmp
-          wget -q https://go.dev/dl/go1.25.0.linux-amd64.tar.gz
+          wget -q https://go.dev/dl/go1.25.3.linux-amd64.tar.gz
           sudo rm -rf /usr/local/go
-          sudo tar -C /usr/local -xzf go1.25.0.linux-amd64.tar.gz
+          sudo tar -C /usr/local -xzf go1.25.3.linux-amd64.tar.gz
           export PATH=/usr/local/go/bin:$PATH
           go version
 
@@ -76,9 +76,7 @@ jobs:
           export PATH=/usr/local/go/bin:$PATH
           cd ${GITHUB_WORKSPACE}
           echo "Running tests..."
-          # Download libsecp256k1.so from nostr repository
-          echo "Downloading libsecp256k1.so from nostr repository..."
-          wget -q https://git.mleku.dev/mleku/nostr/raw/branch/main/crypto/p8k/libsecp256k1.so -O libsecp256k1.so
+          # libsecp256k1.so is included in the repository
           chmod +x libsecp256k1.so
           # Set LD_LIBRARY_PATH so tests can find the library
           export LD_LIBRARY_PATH=${GITHUB_WORKSPACE}:${LD_LIBRARY_PATH}
@@ -96,9 +94,8 @@ jobs:
           # Create directory for binaries
           mkdir -p release-binaries
 
-          # Download the pre-compiled libsecp256k1.so for Linux AMD64 from nostr repository
-          echo "Downloading libsecp256k1.so from nostr repository..."
-          wget -q https://git.mleku.dev/mleku/nostr/raw/branch/main/crypto/p8k/libsecp256k1.so -O release-binaries/libsecp256k1-linux-amd64.so
+          # Copy libsecp256k1.so from repository to release binaries
+          cp libsecp256k1.so release-binaries/libsecp256k1-linux-amd64.so
           chmod +x release-binaries/libsecp256k1-linux-amd64.so
 
           # Build for Linux AMD64 (pure Go + purego dynamic loading)