feat(core): implement missing signing host fn

[pgherveou]

Summary

• implement direct signing-host RFC-0004 alias and Bandersnatch ring-VRF proof generation
• mirror Nova full/lite person-key derivation and membership selection
• resolve Members pallet storage at one pinned finalized block, including ring pages, exponent, index, and revision
• use the Parity verifiable revision shared by the mobile implementation

Reference implementations:

• https://github.com/paritytech/polkadot-app-ios-v2/pull/1218
• https://github.com/novasamatech/triangle-js-sdks/pull/224

Validation

• cargo +nightly fmt --check
• RUSTFLAGS="-D warnings" cargo build --workspace --all-targets --all-features
• cargo +nightly clippy --workspace --all-targets --all-features -- -D warnings
• cargo test --workspace --all-features
• RUSTFLAGS="-D warnings" cargo check -p truapi-server --target wasm32-unknown-unknown
• cargo deny check licenses

[pgherveou]

we should cleanup this inconsistency post-merge

[TarikGul]

Summary of what I added in the above:

• Statement-store proof signing now uses its own StatementStoreProductSignReview the confirmation matches the unwrapped statement payload that actually gets signed, instead of borrowing the raw-message (<Bytes>-wrapped) review.
• Resource-allocation confirmation now names the beneficiary product via ResourceAllocationReview.calling_product_id, so approving a delegated allowance key shows which product it's going to.
• SSO responder replay-dedup is now bounded (fixed capacity, evicts oldest) so a paired peer holding the session open can't grow it without bound on the signing device.

NOTE: the two review types change UserConfirmationReview, so host confirmation UIs (iOS/dotli) need to render the new/updated variants, and the codegen golden is refreshed to match. One of the commits also re-blesses a pre-existing stale golden (the AccountAccess variant) that was already red on a clean checkout unrelated to these fixes.