Public nodes can disable API auth. Always setting X-Algo-API-Token to an
empty string caused those requests to fail. Only send the header when
both the header name and token are non-empty.

Fixes #653.

Closes algorandfoundation/algorand-typescript-testing#145

A logic signature authorizes a transaction with a program instead of a key. The
program either owns its own account, whose address is the hash of the program, or
is delegated by an account that signs it and spends from its own balance.

SignedTransaction gains an lsig field, so a logicsig-signed transaction now
survives a decode and re-encode instead of silently losing its authorization.

Delegation targets lmsig. Consensus v41 rejects the legacy msig field on a
LogicSig, because it hashed the bare program under the same domain separator a
single-key delegation uses, letting a member's subsignature be lifted out and
replayed as their own personal delegation. lmsig binds the multisig account
address into the signed bytes. The msig field is kept so historical transactions
decode, but nothing produces it.

The block template declared its own opaque lsig field beside the flattened
SignedTransaction, which would have shadowed the real one. Removed there and
added to both generator constructors; algod_client/tests/models.rs pins that a
logic signature reaches the flattened type, and lives outside src/ so it survives
regeneration.

The escrow address test uses the known program and address pair from the
js-algorand-sdk suite rather than a locally computed value.

Ships the tested upgrade script so clusters carried through pg_upgrade at
0.2 can reach 1.0 with ALTER EXTENSION pg_algorand UPDATE, without the
drop/recreate dance. CREATE OR REPLACE upgrades the two functions with
dependents in place; the three GetNFD* functions are dropped and
recreated because 1.0 renamed their parameters. Verified on betanet,
testnet x2 and mainnet upgrades (identical to a fresh 1.0 install).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019ACfCvu2UPpd6UcoK8cpW3

- Introduced Falcon-1024 account type with corresponding UI elements and localization in Russian, Slovak, and Turkish.
- Implemented account creation, import, and export functionalities for Falcon accounts.
- Added Falcon-specific mnemonic generation and validation.
- Integrated Falcon signing mechanism for transactions.
- Updated routing to include Falcon account creation page.
- Enhanced backup warnings and account management features for Falcon accounts.
- Added unit tests for Falcon account functionalities.

fix: reject negative extra_pages in appcall transactions

It asserted that escrow entries outnumber self entries in beneficiaries.json,
which held while the cache only ever saw fxALGO holders — those sit almost
entirely in Folks escrows (~3333 of ~3352 per the README).

56d8577 broadened the candidate set to both assets, and plain xALGO holders
are wallets, so they resolve to self. The cache is now 3978 escrow / 8046 self
(33%), and the premise is false by design rather than by regression. The file
does not record which asset a candidate came from, so the fxALGO-only ratio
cannot be recovered from it.

The two remaining assertions still cover the file's real invariants: ordering
and address validity, and that every escrow entry names a tracked app, a valid
owner distinct from the escrow, and an opt-in round.