so, after a little bit of investigation into the cors/nip-05 problem i have come up with an idea how i'm going to solve this a bit later on when i've got less pressing things in front of me
currently i was just using a simple http.FileServer - which is a simple, and inflexible construct in the go standard library for serving static files
instead, i should be writing a short single purpose nip-05 server that you feed it a nostr.json and it makes a custom response with the necessary CORS wildcard header
i don't know why i never saw this before... i guess coracle and others are still seeing my nip-05 and not making any notice of the cors error but nostrudel is
so for the time being, until i write this little custom server, i have a golden exclamation mark verifying my URL is associated with my pubkey