Really good start. I would send the PR right away to see what others think.
I would also take a look on Nip-46's spec that allows multiple clients using multiple users. And the signer can have permissions active for each client (via a nostr key only that client uses). In that way, the signer always knows where the request is coming from.