Proxies images against a HMAC signature -- this prevents knot URLs from
directly being hit and possibly spammed. Also caches images in
Cloudflare's global CDN.

renames jetstream consumer in appview to ingester.

did+rkey can uniquely identify a row for any data record.

off by one

annotated tags have their own custom hashes, but the "target" of the tag
points to the commit they refer to.

Prevents the ugly browser enforced bold that we had all this while.

the conditionals here were a bit confusing, branch-based PRs just
skipped commit links altogether.

loading up issues on @tangled.sh/core should be much faster because we
only have to resolve ~10 DIDs at a time. with a saturated did-handle
cache, this should be near-instant page load times.

introduces the filetree package.

eventually we will have a sticky side-panel style layout for any page
displaying diffs (probably makes most sense when we have split diffs),
and this file-tree will move there.

in dev mode; all html templates are loaded from disk on access. UI
updates take <100ms now:

- go files are watched by air/gust
- html/css files are watched by `tailwind -w`

html/css changes do not cause appview reload; but do trigger reload of
static assets and templates; giving us instant live reloads for UI
development.

follows our diff fragment colorscheme now

and move appview/state/settings to appview/settings

move settings router into a subpackage

also introduces a middleware package under appview, and turns TID() into
a global function that operates on a globally mutable TID clock.

PRs are no longer merged as a single commit.

takes a lot of inspiration from patchutils' interdiff algorithm. unlike gerrit; rebase detection is very much a work in progress.