0.3.0:0

Update to upstream Spaces 0.3.0 and refresh bundled images (subs v0.1.2c,
certrelay v0.2.8, nacho v1.0.0b). Add Create/Show Registry API Keys for
registry-server, remove Configure Subspaces and SUBS_PUBLISH_REQUIRE_FINALIZED,
and align README/instructions with the new tags.

Co-authored-by: Cursor <cursoragent@cursor.com>

startos/fileModels/storeJson.ts

@@ -39,7 +39,12 @@ const shape = z.object({
   certrelayBootstrap: z.boolean().nullable().catch(null),
   certrelayHealthcheckHandle: z.string().nullable().catch(null),
   nachoWorkshopPdfLinkText: z.string().nullable().catch(null),
-  subsPublishRequireFinalized: z.boolean().nullable().catch(null),
+  // Bearer secrets for the embedded registry-server (examples/registry-server).
+  // REGISTRY_API_KEY guards POST /register; SUBSD_API_KEY is the Auth Token
+  // for the subs↔registry channel (Settings → Registry Server → Auth Token).
+  // Both are required and must differ or registry-server refuses to start.
+  registryApiKey: z.string().nullable().catch(null),
+  subsdApiKey: z.string().nullable().catch(null),
 })
 
 export const storeJson = FileHelper.json(