AlgoScan

Drop the localnet-tests feature gate: the generated clients are the algod/
indexer/kmd clients, so exercising them against a live node is core coverage,
not an opt-in extra. The endpoint tests now compile and run as part of cargo t,
which assumes a running, seeded localnet. sanity.sh and CI seed localnet
(cargo api seed-localnet) before cargo t. Deferred tests keep their #[ignore].

Replace the per-test #[ignore = "requires localnet"] with a localnet-tests
cargo feature: the generated aggregator is #![cfg]'d off by default so offline
cargo t stays green, and enabling the feature against a seeded localnet runs the
suite. Deferred tests keep their own #[ignore]. state_lock() moves to an async
tokio::sync::Mutex so its guard is safe to hold across the awaits it guards.

- Refactor changePasswordClick method in Settings.vue to be asynchronous, ensuring proper handling of password changes.
- Introduce clearDerivedKeys function in walletCrypto.ts to clear cached AES keys on logout, addressing security concerns.
- Update logout action in wallet.ts to call clearDerivedKeys, enhancing session security.
- Modify changePassword action in wallet.ts to commit the new password to state, preventing silent reversion to the old password.
- Add detailed security audit report for findings related to password management and session handling, highlighting critical issues and recommendations for improvement.

- Added new wallet encryption helpers in walletCrypto.ts
- Introduced a new format for wallet encryption (AWEv1) using AES-256-GCM
- Implemented PBKDF2-SHA256 for key derivation with 600,000 iterations
- Ensured backward compatibility with legacy CryptoJS encryption format
- Added functions for encrypting and decrypting wallet data
- Included caching for derived keys to improve performance