0.3.0:0

Update to upstream Spaces 0.3.0 and refresh bundled images (subs v0.1.2c,
certrelay v0.2.8, nacho v1.0.0b). Add Create/Show Registry API Keys for
registry-server, remove Configure Subspaces and SUBS_PUBLISH_REQUIRE_FINALIZED,
and align README/instructions with the new tags.

Co-authored-by: Cursor <cursoragent@cursor.com>

startos/main.ts

@@ -149,8 +149,6 @@ export const main = sdk.setupMain(async ({ effects }) => {
     SUBS_SPACED_RPC_PASSWORD: spacedAuth.password,
     SUBS_PROVER_ENDPOINT: `http://127.0.0.1:${SUBSPACES_PROVER_PORT}`,
     SUBS_REGISTRY_ENDPOINT: `http://127.0.0.1:${SUBSPACES_REGISTRY_PORT}`,
-    SUBS_PUBLISH_REQUIRE_FINALIZED:
-      store.subsPublishRequireFinalized === true ? 'true' : 'false',
     HOME: SUBSPACES_DATA_DIR,
     RUST_LOG: 'subs=info,subs_prover=info,registry_server=info',
     ...subsAuthEnv,
@@ -181,6 +179,9 @@ export const main = sdk.setupMain(async ({ effects }) => {
     REGISTRY_SERVER_PORT: String(SUBSPACES_REGISTRY_PORT),
     HOME: SUBSPACES_REGISTRY_DIR,
     RUST_LOG: 'registry_server=info',
+    // examples/registry-server requires both at boot; they must differ.
+    REGISTRY_API_KEY: store.registryApiKey ?? '',
+    SUBSD_API_KEY: store.subsdApiKey ?? '',
   }
 
   const certrelaySub = sdk.SubContainer.of(
@@ -371,6 +372,22 @@ export const main = sdk.setupMain(async ({ effects }) => {
   // subs daemon) to any existing chain. `as any` because the chain's TS type
   // depends on prior IDs and we can't easily express the union here.
   const withSubspaces = (chain: any): any => {
+    const registryApiKey = store.registryApiKey
+    const subsdApiKey = store.subsdApiKey
+    if (
+      !registryApiKey ||
+      !subsdApiKey ||
+      registryApiKey.length === 0 ||
+      subsdApiKey.length === 0 ||
+      registryApiKey === subsdApiKey
+    ) {
+      // taskRegistryApiKeys surfaces Create Registry API Keys when Subspaces is
+      // on without valid keys; refuse to start the registry half-configured.
+      throw new Error(
+        'Registry API keys are not configured. Run Create Registry API Keys.',
+      )
+    }
+
     let c = chain
       .addOneshot('subspaces-dirs', {
         subcontainer: subspacesSub,