Third-party dApp support for Zcash Snap (allowedOrigins restriction)

Hi ChainSafe team,

I'm building **SIWZ** (Sign in with Zcash), a practical SIWE-style auth primitive.

I want to support your Snap for the best UX (`getViewingKey`, future `signPczt`, etc.), but I'm blocked by the strict `allowedOrigins` in the snap manifest (currently only `https://webzjs.chainsafe.dev` is allowed).

**Demo:** https://siwz.vercel.app/
**npm:** `@siwz/core`, `@siwz/react`, `@siwz/next-auth`

A couple of questions:
1. Is there a planned path for third-party dApps to use the Snap (e.g. runtime permission prompt)?
2. Any timeline for publishing `@chainsafe/webzjs-wallet` to npm?

I'm happy to help with testing, UI for permissions, or a PR if useful.

Thanks for the great work on WebZjs!