Replace Ed25519 with hashed API tokens and an in-Firefox client manager.

extension/manifest.json

@@ -1,8 +1,8 @@
 {
   "manifest_version": 3,
   "name": "Firefox Agent Bridge",
-  "version": "0.1.0",
-  "description": "Expose an allowlisted WebExtension API to local scripts and agents over native messaging.",
+  "version": "0.2.0",
+  "description": "Let local scripts and agents call an allowlisted WebExtension API after you issue them a secret.",
   "browser_specific_settings": {
     "gecko": {
       "id": "firefox-agent-bridge@easygoingaming.com",
@@ -12,5 +12,13 @@
   "permissions": ["bookmarks", "nativeMessaging"],
   "background": {
     "scripts": ["background.js"]
+  },
+  "action": {
+    "default_title": "Firefox Agent Bridge",
+    "default_popup": "popup.html"
+  },
+  "options_ui": {
+    "page": "options.html",
+    "open_in_tab": true
   }
 }