HD create mode stores the mnemonic it shows; WC/Liquid show acfg/afrz/keyreg
effects and refuse stpf/hb; payment-link fee read as microalgos and capped;
gateway verifies receiver/asset/amount; scheduler responses validated; node
genesis hash checked against the built-in table; plus hardening of CI,
Docker, dependencies and smaller findings.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

- Executive summary detailing findings from the audit covering commits a5217ae..8001781.
- Identified two High severity issues related to HD account mnemonic handling and WalletConnect/Liquid transaction signing.
- Documented Medium and Low severity findings, including issues with payment link parameters and merchant gateway transaction validation.
- Included recommendations for each finding to enhance security and user experience.
- Verified and re-evaluated prior audit findings, with updates on their status.
- Conducted a dependency review, noting advisories and potential vulnerabilities.

Co-authored-by: nullun <git@nullun.com>