feat: implement RFC-0024 ring VRF key management

[pgherveou]

Summary

• implement RFC-0024 registration, listing, alias/proof, and direct ring-VRF signing flows
• persist wallet-scoped ring-VRF registrations and expose native provider selection APIs
• extend AutoSigning with the product root secret and ring-VRF domain entropy
• align authorization, error ordering, wire IDs, and SCALE payloads with the Android implementation
• add generated CLI examples, custom RFC-0024 end-to-end coverage, and committed battery reports

Testing

• cargo test --workspace --all-features
• cargo clippy --workspace --all-targets --all-features -- -D warnings
• RUSTFLAGS="-D warnings" cargo check --target wasm32-unknown-unknown -p truapi-server
• cargo fmt --all -- --check
• bun test rust/crates/*host-cli/js/*.test.ts
• npm run typecheck
• make uniffi
• Android RFC-0024 and SSO unit tests, including exact cross-language SCALE fixtures
• BATTERY_PHASE_TIMEOUT=900 ./scripts/battery.sh --signing-host (52 passed, 19 known unsupported, 0 skipped)
• BATTERY_PHASE_TIMEOUT=900 BATTERY_PAIRING_TIMEOUT=120 ./scripts/battery.sh --pairing-host (52 passed, 19 known unsupported, 0 skipped)

All RFC-0024 registration, listing, direct signing, registry E2E, AutoSigning, Resource Allocation, Preimage, and Statement Store battery cases pass in both host modes.