refactor(truapi): sign personhood through PersonhoodSigner

[pgherveou]

Adds PersonhoodSigner (member key, alias, ring proof) instead of letting every call site derive these from the raw personhood entropy. Until now each allocator received the raw entropy and derived them itself, so the secret travelled through the allocation code and every caller had to hand it over.

Whoever holds the keys implements the signer, so a wallet can answer these calls without giving out its entropy.

For now callers build a FixedPersonhoodSigner from the entropy they hold; later the wallet will own the signer and pass it in.

[github-actions]

Bundle size report

Compared with main at 679ca10.

	Raw	Gzip	Brotli
truapi-host	7.89 MiB (-4.6 KiB, -0.1%)	5.66 MiB (-1.6 KiB)	5.39 MiB (-1.4 KiB)
truapi-provider	4.03 MiB (+2.7 KiB, +0.1%)	1.27 MiB (+142 B)	960.9 KiB (+790 B, +0.1%)
truapi	6.30 MiB	891.5 KiB	730.0 KiB
Total	18.22 MiB (-1.9 KiB)	7.80 MiB (-1.4 KiB)	7.04 MiB (-690 B)

WebAssembly modules

	Raw	Gzip	Brotli
truapi-host/wasm/web/truapi_server_bg.wasm	2.78 MiB (-4.6 KiB, -0.2%)	990.8 KiB (-1.6 KiB, -0.2%)	746.3 KiB (-1.6 KiB, -0.2%)
truapi-host/wasm/web/truapi_verifiable_bg.wasm	4.89 MiB (-13 B)	4.64 MiB (+60 B)	4.61 MiB (+129 B)
truapi-provider/truapi_provider_bg.wasm	3.99 MiB (+2.7 KiB, +0.1%)	1.26 MiB (+142 B)	953.1 KiB (+785 B, +0.1%)

Changed files (3)

	Raw	Gzip	Brotli
truapi-host/wasm/web/truapi_server_bg.wasm	2.78 MiB (-4.6 KiB, -0.2%)	990.8 KiB (-1.6 KiB, -0.2%)	746.3 KiB (-1.6 KiB, -0.2%)
truapi-provider/truapi_provider_bg.wasm	3.99 MiB (+2.7 KiB, +0.1%)	1.26 MiB (+142 B)	953.1 KiB (+785 B, +0.1%)
truapi-host/wasm/web/truapi_verifiable_bg.wasm	4.89 MiB (-13 B)	4.64 MiB (+60 B)	4.61 MiB (+129 B)

_{Commit: baf6ade}

[github-actions]

CI Status: 24 required jobs green, 21 passed and 3 skipped by path filter.

All job results

job	result
android-bindings	success
bundle-size	success
changes	success
changeset-guard	success
cli-package	success
codegen	success
e2e	skipped
explorer	success
headless-install	success
host-android-bindings	success
host-android-detekt	success
host-wasm	success
ios-bindings	success
ios-swift	success
licenses	success
playground	success
provider-android-bindings	skipped
release-guard	success
rust	success
ts-client	success
ts-debugger	success
ts-host	success
wasm-provider	success
workflow-lint	skipped

Signing credentials: failure as of 2026-10-15, a release may fail

_{Commit baf6ade7 · run log}

[filvecchiato]

one nit

[valentinfernandez1]

LGTM