Native v2 Weft client: descriptor-trusted Iroh transport and
[thread_api::Remote::discover].
The application supplies the HTTP client, descriptor trust keys, and
credential. This crate does not read HEDDLE_HOME or mint credentials.
Admin RPCs that still live only on Weft (weftctl) are not shipped here.