//// The one deliberate exception to "web only talks to the BFF": the public,
//// unauthenticated Bluesky AppView actor search used for the login handle
//// autocomplete. It's CORS-open (verified: `access-control-allow-origin: *`)
//// and needs no secret, so proxying it server-side bought nothing. Kept as
//// a single named constant, not inlined into a URL-building call site, so
//// pointing at a different AppView (self-hosted, a mirror) is a one-line
//// change.

pub const base_url = "https://public.api.bsky.app"