Introduce a user Realm keypair (Monocypher) that signs instance certificates so same-domain peers can later auto-discover and connect. Co-authored-by: Cursor <cursoragent@cursor.com>
