feat: land community PRs #39, #44, #45; CI on Node 22

[pyramation]

Summary

Merges the three open community PRs as-is (their branches are merged with --no-ff, so authorship is kept and GitHub will mark #39/#44/#45 merged when this lands), plus a CI toolchain bump.

• feat: add configurable signingRequestExpiry to WC signing requests #39 – signingRequestExpiry (@drimchansky): new WCWallet(info?, wcOptions?, { signingRequestExpiry }) → passed as the 3rd arg of UniversalProvider.request(args, chain, expiry) on every WC sign call (cosmos amino/direct, eth, solana). Opt-in; undefined keeps WalletConnect's default. Still relevant: wc-wallets/* on main has no expiry plumbing. Merges cleanly over fix: validate WC session covers all chains before reuse #43's multichain session changes. Added packages/core/__tests__/wc-wallet-expiry.test.ts (WCWallet + WCCosmosWallet passthrough, unset → undefined).
• Restore Uint8Array pubkeys after localStorage round-trip #45 – revive Uint8Array pubkeys (@Steve0x2a): LocalStorage.load() turns JSON-mangled {0:…,1:…} pubkeys back into Uint8Array. Still relevant: on main WalletManagerStore.restore() loads the cached account unchanged, so signing after a reload fails with "length of pubkey is incorrect" (Uint8Array pubkeys degrade to plain objects after localStorage round-trip #40).
• feat(eightsaf-extension): add EightSaf wallet adapter for Interchain Kit #44 – @interchain-kit/eightsaf-extension (@Mechack08): new extension adapter for EightSaf (Safrochain wallet), same shape as the other extension wallets (ExtensionWallet + CosmosWallet, window.eightsaf). No runtime deps beyond @interchain-kit/core.
• CI: Node 20 → 22; actions/checkout, actions/setup-node, pnpm/action-setup v4 → v5 and upload-artifact v4 → v6 (all node24 runtimes, which removes the "Node.js 20 is deprecated" warning). Root engines.node >=22.0.0, @types/node ^22.

Lockfile

#44's lockfile commit is superseded: pnpm-lock.yaml is regenerated from main's lockfile with CI's pnpm 9.15.4. The large line count is formatting only (main's lockfile has expanded resolution: { integrity } blocks; pnpm writes them inline). Same 2119 packages before/after; the only content changes are the new wallets/eightsaf-extension importer, @types/node 20.19 → 22.19, and peer-suffix keys. No new registries, tarball or git sources.

Security review

• Authors are long-standing GitHub accounts with unrelated public history. The EightSaf author's handle matches the Firefox add-on publisher ("8pro"), and the Chrome/AMO listings and eightsaf.io all resolve.
• No install/lifecycle scripts beyond the standard prepack: npm run build, and no new third-party deps, network calls, CI edits, or eval/obfuscation.
• The EightSaf logo is a base64 SVG. Decoded, it contains only <path>/<style> (no <script>, event handlers, href, or foreignObject).

Verification (local, Node 22.23 / pnpm 9.15.4)

• pnpm install --frozen-lockfile ✓
• pnpm run build ✓ — same TS diagnostics as main's CI (vue, mock-wallet, metamask wallets); none come from changed files
• pnpm run test ✓ (core 128, store 177, all wallets incl. eightsaf)
• eslint on changed files: no errors.

Link to Devin session: https://app.devin.ai/sessions/a02c84f654b94cbcb50936e98373fba5
Open in Devin Desktop: https://app.devin.ai/desktop/session/a02c84f654b94cbcb50936e98373fba5?variant=devin
Requested by: @pyramation

[devin-ai-integration]

I'll fix CI failures and address comments from users with write access. I'll skip comments containing "(aside)".

• Disable automatic comment, CI, and merge conflict monitoring