Better ?nostr=PUBKEY because referrer is often used by other scripts.

But it is still doubtful to do so - automatically adding parameters to URLs that do not process these parameters is a bad practice. And what if, without the user's desire, his #Nostr public key goes where he would not like?