Cardano Updates

Co-authored-by: sg-doc-holiday[bot] <219201796+sg-doc-holiday[bot]@users.noreply.github.com>

feat(release-cli): add drt newsfeed subcommands

Update Electron to 41.3.0 and adapt all affected layers:

Nix packaging:
- Rebuild electron headers derivation for 41.3.0
- Update patchelf/rpath/interpreter handling for new binary layout
- Expand runtime-nodejs-deps.json to include transitive closure (~445 packages)
- Add ELECTRON_SKIP_BINARY_DOWNLOAD=1 to prevent install script fetching
- Migrate nixpkgsJs compat shim to nixpkgs-25.11 nodejs_22; drop glibc-electron-loader.patch

JS dependencies (yarn.lock / package.json):
- @ledgerhq/hw-transport-node-hid 6.33.0, @trezor/connect 9.7.2
- @cardano-foundation/ledgerjs-hw-app-cardano 7.1.4
- @electron/rebuild 4.0.4, @swc/core 1.10.18, webpack 5.106.2
- node-hid 3.3.0, node-forge 1.4.0, moment 2.30.1, ws 8.18.2, axios 1.7.7

Renderer / MobX compatibility (SWC 1.10):
- Set legacyDecorator: true and useDefineForClassFields: false in swc-loader
  options so MobX 5 prototype setters intercept observable class field
  initialisation (SWC 1.3+ changed decorator defaults)
- Relax MobX enforceActions to 'observed' (was 'always'); 'always' blocked
  constructor initialisation routed through setters outside any action

Main process / Electron 41 API fixes:
- safeExitWithCode: app.exit() → process.exit() — app.exit() triggers
  Chromium teardown that causes SIGABRT when renderer is still alive
- CardanoNode._handleCardanoNodeExit: return early when state is STOPPING
  or STOPPED so stop() exclusively owns the shutdown sequence; prevents a
  double broadcastStateChange(STOPPED) IPC call that crashes Chromium
- mainErrorHandler: 'gpu-process-crashed' → 'child-process-gone' (Electron 23+)
- windows/main: 'crashed' → 'render-process-gone' (Electron 23+); remove
  event parameter from 'closed' handler (listener takes no arguments)
- webpack.config (dev): exit webpack watcher when Electron closes cleanly
- package.json dev script: --kill-others --success first so concurrently
  stops all processes when Electron exits

TypeScript fixes (updated @trezor/connect 9.x API):
- Define BridgeInfo/UdevInfo locally (removed from public exports)
- Add required appName field to Trezor manifest
- type: 'warning' as const for dialog MessageBoxOptions
- Cast devicePath to DeviceUniquePath branded type
- Make node-hid-incompatible Device fields optional in local types
- Remove non-existent onLearnMoreClick prop from StakingRewards story

Signed-off-by: Doc Holiday <[email protected]>

Signed-off-by: Doc Holiday <[email protected]>

Signed-off-by: Doc Holiday <[email protected]>

Signed-off-by: Doc Holiday <[email protected]>

Signed-off-by: Doc Holiday <[email protected]>

Signed-off-by: Doc Holiday <[email protected]>

Signed-off-by: Doc Holiday <[email protected]>

Signed-off-by: Doc Holiday <[email protected]>

Replace the ad-hoc nix/ directory and flake-utils setup with a
flake-parts structure mirroring hermod-tracing:

- flake.nix: adopt nixConfig cache block, flake-parts, haskell.nix +
  hackageNix + CHaP; remove devx and flake-utils
- flake/lib.nix: recursiveImports helper for auto-discovering perSystem
- perSystem/project.nix: cabalProject' for cardano-addresses (ghc967)
- perSystem/devShells.nix: shellFor with cabal/ghcid/HLS tools
- perSystem/packages.nix: library, exe and unit test check
- perSystem/haddocks.nix: haddock index package (ghc967)
- perSystem/hydraJobs.nix: required/nonrequired aggregates; Darwin in
  nonrequired
- perSystem/wasm.nix: wasm32-wasi cross-build via projectCross.wasi32
  (ghc9123) with haskell.nix native toolchain; module overrides for ram
  and crypton hsc2hs/C flags
- perSystem/windows.nix: mingwW64 cross-build via projectCross.mingwW64
- perSystem/musl.nix: static x86_64 binary via projectCross.musl64
- cabal-wasm.project: add --sha256 pins for source-repository-packages
- Remove nix/wasm.nix and nix/supported-systems.nix
- Remove old CI workflows (haskell, nix, style, wasm); replace with
  unified pages workflow building Docusaurus + Haddocks
- docusaurus.config.js: update to cardano-addresses.cardano.intersectmbo.org

Signed-off-by: Doc Holiday <[email protected]>

Signed-off-by: Doc Holiday <[email protected]>

The configuration doc claimed the `full` preset enables every option, but since
13.7.0.1 it leaves `offchain_pool_data` and `offchain_vote_data` disabled by default.

Signed-off-by: Eric Torreborre <[email protected]>

Adds three subcommands under `drt newsfeed`:

- `release` — fetches installer metadata from a URL, builds a
  software-update + announcement pair with pre-filled hashes/URLs and
  localised text, opens \$EDITOR for review, then writes the newsfeed
  JSON and verification file.  Release notes URL defaults to the GitHub
  release tag derived from the fetched version.
- `publish` — uploads the current newsfeed JSON and verification file
  to an S3 bucket for end-to-end testing (--dry-run supported).
- `message` — adds a standalone announcement item with a configurable
  version target.

Common repo/env args (--env, --newsfeed-repo, --verification-repo) are
shared via a flattened NewsfeedRepoArgs struct and read from NEWSFEED_*
environment variables.

Signed-off-by: Eric Torreborre <[email protected]>

Picks up the post-merge pin (2012360 → upstream
cardano-node-clients @ 0581418362, the merge of #94
into main).

cardano-node-clients pull/94 merged at
0581418362 (T022 starvation E2E commit). Per the
*pins-main-only* rule, downstream pins on the main path
must point at a commit on upstream main, never at a
feature-branch tip.

The narHash on 0581418362 matches 4fca187eac (the previous
branch-tip pin) — the merge was a fast-forward of the
already-CI-green head, no source delta. No rebuild needed
on the Cachix path.