comment routes are now grouped under the "round" they operate on

my hunch is that this is caused by using a GET request, which browsers tend to cache sometimes.

The Nix build fails on Nixpkgs 24.11 due to CGO_ENABLED being renamed to env.CGO_ENABLED https://github.com/NixOS/nixpkgs/commit/3b1ec755ca88778d4b706b6dd52b57c0086b1548

This PR changed the Nix flake Nixpkgs input to 24.11 instead of the master branch, which makes it easier to deploy with systems tracking stable Nixpkgs.

oops

Also improves the file/tree metadata.

get user handle from resolver, and use the user's primary email id, if set

Version is currently set during build time using ldflags, but if not, it
will attempt to pick up the Go module version (if installed via 'go
install' or 'go get', for example).

adds the delete handle for delete a specified ssh key.

I just changed the hash for goModHash and nix build succeeded.

Thanks @dvjn.dev!

Introduces two new user routing options: handles without @'s will
redirect to their @'d counterparts, and did-plc-foobar (a flattened
did) will redirect to did:plc:foobar.

These can now be used as valid Go modules.

no point in customizing the endpoint in keyfetch, if it is not propagated through to repoguard

when trying to verify a [plus addressed](https://www.google.com/search?q=plus+addressing) email id, opening the received verification link gives "Invalid verification code. Please request a new verification email."
this is due to unescaped `+` in the email id. ideally all the query params should be url encoded.

improve merge check a bit too

indices are unstable; switch to maps everywhere

Setup verification emails and future transactional emails using
Resend.

So the secret isn't put in the public Nix store

Wonder how many people were misled by this.

closes #42 by stripping one leading slash from the repo parameter.

also fixes a minor issue with the nix develop shellhook.

this kinda hacky fix is tested with the following commands:

```
nix build .#repoguard
SSH_ORIGINAL_COMMAND="git-upload-pack '/soopy.moe/test-repo'" ./result/bin/repoguard -log-path /tmp/ASDUJBIf-repoguard.log -user git
SSH_ORIGINAL_COMMAND="git-upload-pack 'soopy.moe/test-repo'" ./result/bin/repoguard -log-path /tmp/ASDUJBIf-repoguard.log -user git
```

No need to restart all subscribers when we get a new wantedDid.

Introduces rebalancing of dids across multiple subscribers if we exceed
a threshold of 100 wantedDids.

Turns out jetstream has a limit that we hit with our 300+ subscriptions
in a single query.

Otherwise it conflicts with the first created existing user

path-extractor in the router should use an escaped path

Users of the knotserver module not using `nixos-unstable` faces the error linked below when rebuilding their system. Removing the usage of overlays, and instead using the existing `self.packages` functionality allow packages to be less dependent on the user's configuration, avoids a pitfall like this and is thus more reproducible.

This patch also fixes the appview module referencing a non-existent package.

This patch also removes redundant usages of `with final;` and includes some minor formatting done by alejandra.

Minimum example: https://akyuu.soopy.moe/dGNHld.nix
Example build failure with master branch tip: https://akyuu.soopy.moe/4aNh8c.txt

Thanks to @ducky.ws, this changes GetAvatarUri to fetch it directly from the PDS.

the "http" and "ssh" chips were block elements and not inline elements, and would grow according to other items in the flexbox. this pull reworks the clone-card to make chips inline, and enables overflow for urls.