fix(auth): route all nostrLoggedIn listeners through signed-event verification

The previous commit only updated auth-button + the WithNostrAuth trait,
but six Volt pages (profile, benefits, election/*, members/admin) carry
their own handleNostrLoggedIn(string $pubkey) handlers. The dispatched
payload is now an array, so Livewire's container could not resolve the
string parameter and threw BindingResolutionException on every login.

- All six per-page handlers now accept the signed event and route it
  through NostrAuth::loginWithSignedEvent() like the trait does.
- NostrAuth: add currentOrIssueChallenge() so the sidebar + navbar
  auth-button mounts share one live session challenge instead of
  overwriting each other.
- verifySignedEvent: pass a normalized stdClass to swentel's verify()
  directly, skipping an unnecessary json_encode + json_decode round-trip.
- auth-button: gate the global Escape/Tab capture so it only intercepts
  keys while the overlay is actually visible.
- Update three test files that still called handleNostrLoggedIn with a
  raw pubkey to authenticate via NostrAuth::login() instead.

tests/Feature/Livewire/Association/ProfileTest.php

@@ -24,22 +24,24 @@ it('rejects non-string values for the nip05Handle field', function () {
         ->assertStatus(422);
 });
 
-it('handles nostr login correctly', function () {
+it('reflects an authenticated nostr session on mount', function () {
     $pleb = EinundzwanzigPleb::factory()->create();
 
+    NostrAuth::login($pleb->pubkey);
+
     Livewire::test('association.profile')
-        ->call('handleNostrLoggedIn', $pleb->pubkey)
         ->assertSet('currentPubkey', $pleb->pubkey)
         ->assertSet('currentPleb.pubkey', $pleb->pubkey);
 });
 
-it('handles nostr login for active member and initializes payment state', function () {
+it('initializes payment state for an active member on mount', function () {
     $pleb = EinundzwanzigPleb::factory()->active()->create();
 
     expect($pleb->paymentEvents()->count())->toBe(0);
 
+    NostrAuth::login($pleb->pubkey);
+
     Livewire::test('association.profile')
-        ->call('handleNostrLoggedIn', $pleb->pubkey)
         ->assertSet('currentPubkey', $pleb->pubkey)
         ->assertSet('currentPleb.pubkey', $pleb->pubkey)
         ->assertSet('amountToPay', config('app.env') === 'production' ? 21000 : 1);
@@ -47,11 +49,12 @@ it('handles nostr login for active member and initializes payment state', functi
     expect($pleb->paymentEvents()->count())->toBeGreaterThan(0);
 });
 
-it('handles nostr logout correctly', function () {
+it('clears state on nostr logout', function () {
     $pleb = EinundzwanzigPleb::factory()->create();
 
+    NostrAuth::login($pleb->pubkey);
+
     Livewire::test('association.profile')
-        ->call('handleNostrLoggedIn', $pleb->pubkey)
         ->call('handleNostrLoggedOut')
         ->assertSet('currentPubkey', null)
         ->assertSet('currentPleb', null);