Function binding_payload 

pub fn binding_payload(session_did: &str, nostr_xonly: &[u8; 32]) -> String

The domain-separated message both keys sign. The npub is lowercase hex so the message is a plain printable string on the same sign_did_cert path the other wire certs use.