fix: use AT URI matching to detect unmatched PDS records in remanso publish
The previous path-based comparison used a hardcoded /posts/{slug} prefix
that never matched the actual /pub/{rkey}/{slug} paths stored in PDS records,
causing all existing notes to be treated as unmatched and deleted whenever
a new note was published.