Cardano Updates

Fix bulk credentials path to construct PraosCredentialsSource

Use retryUntilJustM to poll for the multi-asset UTxO instead of
waiting a fixed 1 block and querying once. The mint transaction may
not be confirmed within a single block, causing
findLargestMultiAssetUtxoWithAddress to return Nothing.

This matches the retry pattern already used for the script address
UTxO lookup a few lines below.

Flake lock file updates:

• Updated input 'CHaP':
    'github:intersectmbo/cardano-haskell-packages/d33b8bf7d6dfe7cf3503a4b540d59e6f68f3ac74?narHash=sha256-oMC%2Bo/z0itbkNqXPPEqxRyKySFyOpeDnX4hEbedSXSY%3D' (2026-03-26)
  → 'github:intersectmbo/cardano-haskell-packages/2d51f381c901c7f1a799d65d2de4f2387d07a9e5?narHash=sha256-4GaPRLb1S9pvQnSXBYdKz2xCZzu0m1UgWsItFu9poOk%3D' (2026-03-28)
• Updated input 'hackageNix':
    'github:input-output-hk/hackage.nix/06fa3e96f4d7ced3496ec984c8016aad5282db67?narHash=sha256-AErDLAypo/a4gNSKjExpNUM7xdlsTdTf68cWnbr1bOA%3D' (2026-03-26)
  → 'github:input-output-hk/hackage.nix/b76e4ad83ba8f7f4630e30a22f50219945791eef?narHash=sha256-nUfHYzWVH9fIOfmfCFXwDOZ0lqEzdT9XXip/FGfVD28%3D' (2026-03-28)

Fixes nix / useCabalRun=false profiles with profiling enabled

See #6380

Fix check-git-dependencies for indented source-repository-package stanzas

The grep and sed patterns were anchored to the start of line
(^source-repository-package), but the stanza is now indented inside
an `if impl(ghc >= 9.12)` block. Allow leading whitespace so the
array marker `-` is correctly inserted into the YAML, preventing the
downstream jq parse error.

Replace `-j` with `-o=json` as the former has been deprecated in
newer versions of yq, causing the deprecation warning to corrupt
the JSON output and break jq parsing downstream.

Replace `-j` with `-o=json` as the former has been deprecated in
newer versions of yq, causing the deprecation warning to corrupt
the JSON output and break jq parsing downstream.

bumps cardano-testnet and cardano-tracer minor versions