Adds an authenticated appview xrpc client (mints an atproto service-auth jwt per call) and wires the notifications and sites settings tabs to the org.tangled.temp.* methods, replacing their mocked data. Input gains an optional suffix for the <subdomain>.<sites-domain> claim field.