Browser extension: detect and subscribe to standard.site publications on ATProto

feat(web): add an /architecture page and link it from the privacy policy master

The audience is somebody auditing the extension, a Chrome Web Store reviewer included: the diagram names the four contexts and which side of the browser each network call lands on, and the tables under it name every host, every call and everything kept in storage. The privacy policy makes the same claims in prose, and now links here for the map. The diagram is inlined from the pre-rendered SVG, so it takes the theme's tokens rather than one baked-in palette. verify:dist checks the shipped bytes for a <style> element or a style attribute, since a regenerated diagram carrying either would pass every local check and then render as black boxes behind the real CSP. The page is also linked from the homepage footer, beside the source and license links, rather than from the pitch above it: it is a developer link, and the front of the site is nobody's audit trail.