Publish pubsub messages over Iroh

docs/roadmap.md

@@ -278,8 +278,12 @@ authorization and durable-state boundaries clear.
     buffer.
   - `[x]` Pubsub messages are documented and tested as lossy notifications, not
     durable facts.
-  - `[ ]` `geth pubsub pub/sub` works across local test nodes over Iroh.
-  - `[ ]` Pubsub publish/subscribe access is capability checked.
+  - `[x]` `geth pubsub pub <topic> <message> --node <node-id>` publishes to an
+    imported peer over Iroh.
+  - `[x]` Remote pubsub publish requires `pubsub.publish` on
+    `resource:pubsub:<topic>`.
+  - `[ ]` Replace bootstrap remote publish with iroh-gossip topics.
+  - `[ ]` Pubsub subscribe works across local test nodes over Iroh or gossip.
   - `[ ]` Docs and tests keep durable state in CAS/KV/document/db instead.
 
 ## Phase 4: Pipes, SSH Proxy, And SSH Distribution