Hacker News Reader

I'd love a dead simple, secure, in-browser way to push through NAT and SSH into a Pi.

Not sure what you mean by in-browser, but Tailscale meets the first two requirements: https://tailscale.com/download/linux/rpi

Enter a link, have a terminal emulator in that page already logged in to your Pi

You can use this c3rl.com/roxy