v1.0.29 — Amber login fixed (properly this time)

- Root cause found: callbackUrl was being double-encoded inside the URL builder, arriving garbled at Amber and causing "malformed request"
- Reverted to clean nostrsigner: format per NIP-55 spec with only callbackUrl encoded once