Summary

Adds two CLINK specs for headless / CLI account setup and node discovery:

• CLINK Enroll (kind 21004) — Enroll request/response to provision a Nostr key on a node service and receive default noffer / ndebit / nmanage pointers without proprietary wallet RPC.
• CLINK Beacon (kind 30078) — Optional replaceable heartbeat for node liveness, persona, fee disclosure, Enroll PoW hints, and operator-linked discovery.

README updated with spec links and event-kind rows.

Enroll highlights

• Direct-use only: does not mint third-party debit/manage grants.
• Owner policy: enrolled key MAY self-debit / self-manage without separate grants.
• Optional NIP-13 PoW on enroll (recommended ~18 bits); portable probe path (code 4 + required_difficulty) is normative.

Beacon highlights

• d=clink-node — service heartbeat (persona, fees, enroll_difficulty, supported_kinds, optional operator_npub).
• d=clink-node-operator / clink-node-operator-revoke — bidirectional operator linkage with affinity-scam defense.
• Revocation via replaceable state
• Operator-first discovery: fetch operator attestation, then confirm operator_npub on each service beacon (not #operator scan alone).
• Beacon is optional optimization; Enroll probe remains the portable fallback.