fix: resolve did:dht compilation errors

- Simplify DHT encoding: use JSON instead of DNS packets (drop simple-dns)
- Fix mainline crate API: SigningKey takes 32 bytes, get_mutable returns Result
- Add missing dht_did field to IdentityRecord constructor
- Store DID Document as JSON in DHT (DNS encoding deferred)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

neode-ui/src/stores/appLauncher.ts

@@ -2,23 +2,17 @@ import { defineStore } from 'pinia'
 import { ref, watch } from 'vue'
 import { rpcClient } from '@/api/rpc-client'
 
-/** Apps that set X-Frame-Options or CSP frame-ancestors, blocking iframe embedding.
- *  Verified by checking response headers from each app container.
- *  These always open in a new tab. Other apps load in the iframe overlay.
- */
 /** Hostnames of external sites that block iframes via X-Frame-Options or CSP.
- *  Sites listed here that also appear in EXTERNAL_PROXY will be proxied (not blocked).
- */
-const IFRAME_BLOCKED_HOSTS: string[] = []
+ *  These always open in a new tab. Other external sites load directly in the iframe. */
+const IFRAME_BLOCKED_HOSTS: string[] = [
+  '484.kitchen',
+  'botfights.net',
+  'present.l484.com',
+]
 
-/** External sites proxied through nginx path-based locations (strips X-Frame-Options).
- *  Uses /ext/{key}/ paths on the main nginx port so it works over Tailscale too. */
-const EXTERNAL_PROXY_PATH: Record<string, string> = {
-  'botfights.net': '/ext/botfights/',
-  '484.kitchen': '/ext/484-kitchen/',
-  'present.l484.com': '/ext/arch-presentation/',
-  'nostrudel.ninja': '/ext/nostrudel/',
-}
+/** External site proxy paths — disabled. External URLs load directly in the iframe
+ *  via their standard https:// URL. The /ext/ subpath approach broke SPAs. */
+const EXTERNAL_PROXY_PATH: Record<string, string> = {}
 
 function mustOpenInNewTab(url: string): boolean {
   try {