It's a variation of the ADR described here: #310. Namespaces allow peers to publish files under paths like ``<namespace>/<pubkey>` if they hold a certificate signed by the network key. This enables dynamic, per-peer file publishing without requiring each file to be pre-configured. Also cleans up some testing patterns.