Add serve mode, fix binary tags, document CLI tools, improve Docker

- Add 'serve' subcommand for ephemeral RAM-based relay at /dev/shm with
  open ACL mode for testing and benchmarking
- Fix e-tag and p-tag decoding to use ValueHex()/ValueBinary() methods
  instead of Value() which returns raw bytes for binary-optimized storage
- Document all command-line tools in readme.adoc (relay-tester, benchmark,
  stresstest, blossomtest, aggregator, convert, FIND, policytest, etc.)
- Switch Docker images from Alpine to Debian for proper libsecp256k1
  Schnorr signature and ECDH support required by Nostr
- Upgrade Docker Go version from 1.21 to 1.25
- Add ramdisk mode (--ramdisk) to benchmark script for eliminating disk
  I/O bottlenecks in performance measurements
- Add docker-compose.ramdisk.yml for tmpfs-based benchmark volumes
- Add test coverage for privileged policy with binary-encoded p-tags
- Fix blossom test to expect 200 OK for anonymous uploads when auth is
  not required (RequireAuth=false with ACL mode 'none')
- Update follows ACL to handle both binary and hex p-tag formats
- Grant owner access to all users in serve mode via None ACL
- Add benchmark reports from multi-relay comparison run
- Update CLAUDE.md with binary tag handling documentation
- Bump version to v0.30.2

docs/PUREGO_BUILD_SYSTEM.md

@@ -283,15 +283,13 @@ Dockerfiles simplified:
 FROM golang:1.25-alpine AS builder
 WORKDIR /build
 COPY . .
-RUN go build -ldflags "-s -w" -o orly .
+RUN CGO_ENABLED=0 go build -ldflags "-s -w" -o orly .
 
-# Runtime can optionally include library
+# Runtime includes libsecp256k1.so from repository
 FROM alpine:latest
-RUN apk add --no-cache wget ca-certificates
+RUN apk add --no-cache ca-certificates
 COPY --from=builder /build/orly /app/orly
-# Download libsecp256k1.so from nostr repository (optional for performance)
-RUN wget -q https://git.mleku.dev/mleku/nostr/raw/branch/main/crypto/p8k/libsecp256k1.so \
-    -O /app/libsecp256k1.so || echo "Warning: libsecp256k1.so download failed (optional)"
+COPY --from=builder /build/libsecp256k1.so /app/libsecp256k1.so
 ENV LD_LIBRARY_PATH=/app
 CMD ["/app/orly"]
 ```