So, fun thing about the way the `.well-known.nostr.json` idea works is that it CORS policies break it in javascript clients.