Even if you can't inject window.nostr you should be able to listen for window.postMessage() calls or something similar, no? Then you just need to handle that proprietarily on a Swift "backend" for Iris.