Cardano Updates

Signed-off-by: Sasha Bogicevic <[email protected]>

  newLocalUTxO was carried on TransactionAppliedToLocalUTxO,
  SnapshotRequested, and DecommitRecorded but is fully derivable from the
  event's tx (or snapshot fields) plus current state. Aggregate now
  recomputes it via a new IsTx method `applyTxTo` (pure UTxO arithmetic,
  no ledger validation).

  Removes O(N²) on-disk growth on Growing-UTxO workloads. JSON format is
  forward/backward compatible — old event stores still parse.

  Measured (bench-e2e --utxo-size Growing -n 2000):
  - hydra.db:         1.6 GB → 526 MB  (-67%)
  - hydra-node-0.log: 2.1 GB → 1.1 GB  (-48%)
  - avg confirm:      92.9 ms → 84.1 ms (-9%)

Signed-off-by: Sasha Bogicevic <[email protected]>

  Instead of byte-slicing extended signing keys into normal keys (which
  produces wrong verification key hashes for BIP32-Ed25519), keep them
  native via a CardanoSigningKey sum type and signTxWith helper that
  delegates to the appropriate ShelleyWitnessSigningKey constructor.

  Light wallets (Eternl, Lace, Yoroi) export HD-derived extended keys
  (PaymentExtendedKey — BIP32-Ed25519) which Hydra previously rejected.
  Convert extended keys to normal PaymentKey at load time so users can
  use wallet-exported key files directly with --cardano-signing-key and
  --cardano-verification-key without manual conversion.

The `mithri`l `2617.0` release switched all nodes to static musl builds.
As a side effect, mithril-client-cli is no longer exposed as a
standalone Nix package for non-Linux platforms. It only exists under
`packages.x86_64-linux`. This broke nix develop on `aarch64-darwin`.


The one real downside of current solution is that the fallback pulls in
the entire mithril package (aggregator, signer, end-to-end tooling,
etc.) just to get `mithril-client`.

<!-- Describe your change here -->

---

<!-- Consider each and tick it off one way or the other -->
* [ ] CHANGELOG updated or not needed
* [ ] Documentation updated or not needed
* [ ] Haddocks updated or not needed
* [ ] No new TODOs introduced or explained herafter

---------

Co-authored-by: Noon <[email protected]>

Updates to the latest mithril

`selfci` uses `libc::SYS_pidfd_open` (Linux-only syscall)

I moved `pkgs.selfci` out of the unconditional `buildInputs` and into
the existing Linux-only block

<!-- Describe your change here -->

---

<!-- Consider each and tick it off one way or the other -->
* [ ] CHANGELOG updated or not needed
* [ ] Documentation updated or not needed
* [ ] Haddocks updated or not needed
* [ ] No new TODOs introduced or explained herafter