Is your feature request related to a problem? Please describe.
Nostream currently has no way to filter events by social trust - any pubkey can publish regardless of whether the relay owner knows them.

Describe the solution you'd like
A WotService that builds a 2-hop trust graph from the relay owner's follow list, exposes isTrusted(pubkey) and isReady(), and swaps atomically on refresh. Pure logic, no process wiring.

Additional context
Depends on #623 (merged). Worker wiring and admission guard are separate PRs.