chore: add new files from upstream main

includes changesets, husky install script, auth handler,
group event strategy, geohash utils, NIP-25/NIP-65 utils,
integration and performance test scaffolding.

Author: Anshumancanrock

.changeset/brown-bears-pay.md

@@ -0,0 +1,5 @@
+---
+"nostream": patch
+---
+
+fix: maxLimit checks added to subscription message handler

.changeset/callback-check-payments-enabled.md

@@ -0,0 +1,5 @@
+---
+"nostream": patch
+---
+
+fix: check payments.enabled in callback route middleware

.changeset/callback-routes-conditional-registration.md

@@ -0,0 +1,5 @@
+---
+"nostream": patch
+---
+
+refactor: only register OpenNode, LNbits, and Zebedee callback routes when their processor is active

.changeset/dark-places-tickle.md

@@ -0,0 +1,5 @@
+---
+"nostream": patch
+---
+
+Fix root HTML negotiation and subpath-aware template links behind trusted proxies.

.changeset/dependabot-pr-613.md

@@ -0,0 +1,5 @@
+---
+"nostream": patch
+---
+
+chore(deps): bump axios from 1.15.1 to 1.15.2

.changeset/dependabot-pr-617.md

@@ -0,0 +1,5 @@
+---
+"nostream": patch
+---
+
+chore(deps): bump fast-uri from 3.1.0 to 3.1.2

.changeset/dependabot-pr-618.md

@@ -0,0 +1,5 @@
+---
+"nostream": patch
+---
+
+chore(deps): bump ws from 8.20.0 to 8.20.1

.changeset/dependabot-pr-620.md

@@ -0,0 +1,5 @@
+---
+"nostream": patch
+---
+
+chore(deps): bump uuid from 8.3.2 to 14.0.0

.changeset/dependabot-pr-630.md

@@ -0,0 +1,5 @@
+---
+"nostream": patch
+---
+
+chore(deps): bump axios from 1.15.2 to 1.16.0

.changeset/fix-serialize-javascript-cve.md

@@ -0,0 +1,5 @@
+---
+"nostream": patch
+---
+
+Security: override serialize-javascript to >=7.0.3 (CVE RCE, GHSA-5c6j-r48x-rmvq)