fix: address Codex PR review comments

- Restrict tag-filter matching to first parameter (value position) per NIP-01
- Defensively copy builder lists in EventFilter constructor to prevent
  shared mutable state when reusing builders
- Remove duplicate notifyClose() call from close() since
  afterConnectionClosed already handles listener notification

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: tcheeric

nostr-java-client/src/main/java/nostr/client/springwebsocket/NostrRelayClient.java

@@ -475,8 +475,6 @@ public void close() throws IOException {
       }
       if (open) {
         clientSession.close();
-        connectionState.set(ConnectionState.CLOSED);
-        notifyClose();
       }
     }
   }

nostr-java-event/src/main/java/nostr/event/filter/EventFilter.java

@@ -40,9 +40,9 @@ public class EventFilter {
   private final Map<String, List<String>> tagFilters;
 
   private EventFilter(Builder builder) {
-    this.ids = Collections.unmodifiableList(builder.ids);
-    this.authors = Collections.unmodifiableList(builder.authors);
-    this.kinds = Collections.unmodifiableList(builder.kinds);
+    this.ids = Collections.unmodifiableList(new ArrayList<>(builder.ids));
+    this.authors = Collections.unmodifiableList(new ArrayList<>(builder.authors));
+    this.kinds = Collections.unmodifiableList(new ArrayList<>(builder.kinds));
     this.since = builder.since;
     this.until = builder.until;
     this.limit = builder.limit;
@@ -80,7 +80,7 @@ public Predicate<GenericEvent> toPredicate() {
                 .filter(GenericTag.class::isInstance)
                 .map(GenericTag.class::cast)
                 .filter(t -> t.getCode().equals(tagCode))
-                .anyMatch(t -> t.getParams().stream().anyMatch(values::contains)));
+                .anyMatch(t -> !t.getParams().isEmpty() && values.contains(t.getParams().get(0))));
       }
     }