* feat(passkey): sign for accounts rekeyed to the passkey account

An account rekeyed to the passkey's address (a legacy ed25519 account moved
to a post-quantum key, keeping its address and history) can now be added to
the passkey wallet and signed for like the passkey's own account.

- addRekeyedAccount(address) checks algod's auth-addr and adds the account
  (error code `not-rekeyed` when it isn't rekeyed to the passkey);
  removeRekeyedAccount(address) drops it; passkeyAddress is the passkey's
  own address.
- The wallet record keeps rekeyed accounts per network (genesis hash, else
  network ID); old records still load, and bad or duplicate entries are
  dropped. Switching networks shows that network's accounts, and a resumed
  session reconciles with the record instead of disconnecting.
- signTransactions signs a transaction whose sender is the passkey's own
  address, a rekeyed account, or an account a txn earlier in the same group
  rekeys to the passkey (only when the group has a group ID). A rekeyed
  account's signatures and its empty signature name the passkey as sgnr.
- signData signs for a rekeyed account; core createStdSignData(data,
  address) refuses an address the wallet doesn't hold (SignDataError 4100).

* fix(core): wait for a rekey to the PQ key that algod hasn't shown yet

Right after addRekeyedAccount, a lagging algod read (no auth-addr yet)
made the manager clear the account's empty signature, and signData
refused it with 4603.

- The manager re-checks an account whose empty signature names its PQ
  key as sgnr while algod shows no rekey, three times 2 s apart, before
  clearing it. A check in between waits for the retry already scheduled.
- createStdSignData asks algod again three times 1 s apart in the same
  case before answering 4603.
- The passkey adapter keeps the active account on sign-in again, so a
  rekeyed account stays active.
- An opt-in LocalNet test (LOCALNET_E2E=1) runs the migration group with
  a real Falcon key: the rekey and the passkey's proof in one group, then
  a transaction and SIWA for the account; a wrong passkey's proof fails
  the group; no proof is signed for a group that rekeys elsewhere.

---------

Co-authored-by: Patrick Bennett <170563+pbennett@users.noreply.github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [gradle-wrapper](https://github.com/gradle/gradle) from 9.8.2 to 9.9.0.
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](https://github.com/gradle/gradle/compare/v9.8.2...v9.9.0)

---
updated-dependencies:
- dependency-name: gradle-wrapper
  dependency-version: 9.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [gradle-wrapper](https://github.com/gradle/gradle) from 9.8.2 to 9.9.0.
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](https://github.com/gradle/gradle/compare/v9.8.2...v9.9.0)

---
updated-dependencies:
- dependency-name: gradle-wrapper
  dependency-version: 9.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Bumps the dev-minor-patch group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.64.0` | `1.64.1` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `5.0.4` | `5.0.5` |
| [algosdk](https://github.com/algorand/js-algorand-sdk) | `3.8.0` | `3.9.0` |
| [jsdom](https://github.com/jsdom/jsdom) | `30.1.2` | `30.1.3` |
| [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.87.0` | `1.90.0` |
| [oxlint-tsgolint](https://github.com/oxc-project/tsgolint) | `7.0.2004` | `7.0.2005` |
| [sass](https://github.com/sass/dart-sass) | `1.105.1` | `1.107.1` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.4` | `8.3.5` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.4` | `5.0.5` |



Updates `@playwright/test` from 1.64.0 to 1.64.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](https://github.com/microsoft/playwright/compare/v1.64.0...v1.64.1)

Updates `@vitest/coverage-v8` from 5.0.4 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/coverage-v8)

Updates `algosdk` from 3.8.0 to 3.9.0
- [Release notes](https://github.com/algorand/js-algorand-sdk/releases)
- [Changelog](https://github.com/algorand/js-algorand-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/algorand/js-algorand-sdk/compare/v3.8.0...v3.9.0)

Updates `jsdom` from 30.1.2 to 30.1.3
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](https://github.com/jsdom/jsdom/compare/v30.1.2...v30.1.3)

Updates `oxlint` from 1.87.0 to 1.90.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.90.0/npm/oxlint)

Updates `oxlint-tsgolint` from 7.0.2004 to 7.0.2005
- [Release notes](https://github.com/oxc-project/tsgolint/releases)
- [Commits](https://github.com/oxc-project/tsgolint/compare/v7.0.2004...v7.0.2005)

Updates `sass` from 1.105.1 to 1.107.1
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sass/dart-sass/compare/1.105.1...1.107.1)

Updates `vite` from 8.3.4 to 8.3.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.5/packages/vite)

Updates `vitest` from 5.0.4 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest)

---
updated-dependencies:
- dependency-name: "@playwright/test"
  dependency-version: 1.64.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-patch
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-patch
- dependency-name: algosdk
  dependency-version: 3.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-minor-patch
- dependency-name: jsdom
  dependency-version: 30.1.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-patch
- dependency-name: oxlint
  dependency-version: 1.90.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-minor-patch
- dependency-name: oxlint-tsgolint
  dependency-version: 7.0.2005
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-patch
- dependency-name: sass
  dependency-version: 1.107.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-minor-patch
- dependency-name: vite
  dependency-version: 8.3.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-patch
- dependency-name: vitest
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Right after addRekeyedAccount, a lagging algod read (no auth-addr yet)
made the manager clear the account's empty signature, and signData
refused it with 4603.

- The manager re-checks an account whose empty signature names its PQ
  key as sgnr while algod shows no rekey, three times 2 s apart, before
  clearing it. A check in between waits for the retry already scheduled.
- createStdSignData asks algod again three times 1 s apart in the same
  case before answering 4603.
- The passkey adapter keeps the active account on sign-in again, so a
  rekeyed account stays active.
- An opt-in LocalNet test (LOCALNET_E2E=1) runs the migration group with
  a real Falcon key: the rekey and the passkey's proof in one group, then
  a transaction and SIWA for the account; a wrong passkey's proof fails
  the group; no proof is signed for a group that rekeys elsewhere.