fix(frontend): promote hardened SDK 4 wallet lifecycle

[moscowchill]

Summary

• promote the reviewed QuantaPool wallet lifecycle hardening from dev
• enforce exactly one uppercase Q plus 40-hex wallet account
• serialize wallet selection and bind authorization to the active relay channel
• confirm relay retirement before switching to an extension
• pin @qrlwallet/connect 4.0.0 and @qrlwallet/connect-ui 0.2.0 exactly with audited registry integrities

Validation

• clean npm install from the public registry
• zero-warning frontend lint
• 10 frontend lifecycle and address tests
• TypeScript and production Vite build
• 29 deployment-safety tests
• Solidity format and size build
• 226 Foundry tests
• all feature-to-dev CI checks passed
• npm audit: 12 known low web3 findings, with zero moderate, high, or critical findings

Runtime impact

Frontend dependency and wallet lifecycle promotion only. No contract deployment, frontend deployment, or live-service changes are included.