Load PDS snapshots through the appview container, keep the UI flat,
and only expose Taproot links when a real at:// URI is present.

👾 Generated with [Letta Code](https://letta.com)

Co-Authored-By: Letta Code <noreply@letta.com>

The snapshot and chunk collections now live under the org.latha
namespace instead of the temporary io.aproto placeholder.

👾 Generated with [Letta Code](https://letta.com)

Co-Authored-By: Letta Code <noreply@letta.com>

The helper can now resolve a PDS session non-interactively when the app
password secret is present, which lets remote pushes complete in a headless
session while keeping the OAuth path for normal use.

👾 Generated with [Letta Code](https://letta.com)

Co-Authored-By: Letta Code <noreply@letta.com>

The OAuth client builds its own public metadata, so we only pass the
raw loopback redirect URIs and scope instead of precomputing client_id.

👾 Generated with [Letta Code](https://letta.com)

Co-Authored-By: Letta Code <noreply@letta.com>