Add serve mode, fix binary tags, document CLI tools, improve Docker

- Add 'serve' subcommand for ephemeral RAM-based relay at /dev/shm with
  open ACL mode for testing and benchmarking
- Fix e-tag and p-tag decoding to use ValueHex()/ValueBinary() methods
  instead of Value() which returns raw bytes for binary-optimized storage
- Document all command-line tools in readme.adoc (relay-tester, benchmark,
  stresstest, blossomtest, aggregator, convert, FIND, policytest, etc.)
- Switch Docker images from Alpine to Debian for proper libsecp256k1
  Schnorr signature and ECDH support required by Nostr
- Upgrade Docker Go version from 1.21 to 1.25
- Add ramdisk mode (--ramdisk) to benchmark script for eliminating disk
  I/O bottlenecks in performance measurements
- Add docker-compose.ramdisk.yml for tmpfs-based benchmark volumes
- Add test coverage for privileged policy with binary-encoded p-tags
- Fix blossom test to expect 200 OK for anonymous uploads when auth is
  not required (RequireAuth=false with ACL mode 'none')
- Update follows ACL to handle both binary and hex p-tag formats
- Grant owner access to all users in serve mode via None ACL
- Add benchmark reports from multi-relay comparison run
- Update CLAUDE.md with binary tag handling documentation
- Bump version to v0.30.2

pkg/policy/policy.go

@@ -313,7 +313,7 @@ func New(policyJSON []byte) (p *P, err error) {
 // 2. Mentioned in a p-tag of the event
 //
 // Both ev.Pubkey and userPubkey must be binary ([]byte), not hex-encoded.
-// P-tags are assumed to contain hex-encoded pubkeys that will be decoded.
+// P-tags may be stored in either binary-optimized format (33 bytes) or hex format.
 //
 // This is the single source of truth for "parties_involved" / "privileged" checks.
 func IsPartyInvolved(ev *event.E, userPubkey []byte) bool {
@@ -330,8 +330,8 @@ func IsPartyInvolved(ev *event.E, userPubkey []byte) bool {
 	// Check if user is in p tags
 	pTags := ev.Tags.GetAll([]byte("p"))
 	for _, pTag := range pTags {
-		// pTag.Value() returns hex-encoded string; decode to bytes for comparison
-		pt, err := hex.Dec(string(pTag.Value()))
+		// ValueHex() handles both binary and hex storage formats automatically
+		pt, err := hex.Dec(string(pTag.ValueHex()))
 		if err != nil {
 			// Skip malformed tags
 			continue