Move to the fixed crypto stack and patched dependencies; run quality CI on hosted runners (#47)

- Move backend and root transitive deps to patched versions
- Upgrade web to react-router 7.18 and patched vitest/dompurify
- Move the sign app to vite 6.4.3
- Depend on the fixed crypto stack in web, sign and backend
- sign: typecheck the shared code it compiles
- ci: run the quality jobs on GitHub-hosted runners, and build sign
- Move to @pezkuwi/api 16.5.39
- ci: run CodeQL for JavaScript/TypeScript on a GitHub-hosted runner

sign/package.json

@@ -10,21 +10,23 @@
     "preview": "vite preview"
   },
   "dependencies": {
+    "@pezkuwi/api": "^16.5.39",
+    "@pezkuwi/extension-dapp": "^0.62.27",
+    "@pezkuwi/extension-inject": "^0.62.27",
+    "@pezkuwi/keyring": "^14.0.26",
+    "@pezkuwi/util": "^14.0.26",
+    "@pezkuwi/util-crypto": "^14.0.26",
     "react": "^18.3.1",
-    "react-dom": "^18.3.1",
-    "@pezkuwi/api": "^16.5.36",
-    "@pezkuwi/extension-dapp": "^0.62.20",
-    "@pezkuwi/extension-inject": "^0.62.20",
-    "@pezkuwi/keyring": "^14.0.25",
-    "@pezkuwi/util": "^14.0.25",
-    "@pezkuwi/util-crypto": "^14.0.25"
+    "react-dom": "^18.3.1"
   },
   "devDependencies": {
+    "@pezkuwi/api-augment": "^16.5.39",
+    "@types/node": "^22.20.5",
     "@types/react": "^18.3.12",
     "@types/react-dom": "^18.3.1",
     "@vitejs/plugin-react-swc": "^3.5.0",
     "typescript": "^5.6.3",
-    "vite": "^5.4.10",
-    "vite-plugin-node-polyfills": "^0.22.0"
+    "vite": "^6.4.3",
+    "vite-plugin-node-polyfills": "^0.25.0"
   }
 }

sign/src/api-augment.d.ts

@@ -0,0 +1,3 @@
+// Types only: gives api.query/api.tx/api.events their chain-specific shapes, as
+// web/src/main.tsx does with a runtime import. Nothing here reaches the bundle.
+import '@pezkuwi/api-augment';

sign/tsconfig.app.json

@@ -24,9 +24,10 @@
     "paths": {
       "@/*": ["./src/*"],
       "@pezkuwi/lib": ["../shared/lib"],
-      "@pezkuwi/lib/*": ["../shared/lib/*"]
+      "@pezkuwi/lib/*": ["../shared/lib/*"],
+      "@pezkuwi/*": ["./node_modules/@pezkuwi/*"]
     },
-    "types": ["vite/client"]
+    "types": ["vite/client", "node"]
   },
   "include": ["src"]
 }