might buy in with the idea of not throwing the entire lexicon document out of the window if one of the definition is invalid, @atcute/lexicon-doc should have a linter function or something
one thing i'm curious about wrt oauth permission sets would be passing custom parameters i think, how should a bluesky client authenticate to the pds if it wants to talk to a third-party appview? do third-party appviews have to make their own permission sets with the rpc audience set to them?
