Upgrade to RLN 0.13.0-beta.3 with RGB metadata imports

[Jainakin]

Summary

Upgrade the Node binding to RLN 0.13.0-beta.3 with the bounded C-FFI adapter and contract/consignment metadata import.

Production base: v0.13.0-beta.3 / af03c7f1a65135a429f05a5820600338215954dc.
Import extension: RLN #128 / 5d5aa742984d52767e1055fed6aa154ad732d551.
Released RGB-lib beta.34 and rust-lightning pins remain unchanged; no newer dev VSS commits or broad wallet overlay are included. This is production-based RLN plus the explicit import extension, not an unmodified release.

• Expose importRgbContract and importRgbTransferConsignment; contract metadata creates no allocations and does not bypass normal receipt/settlement.
• Pin the 23-file import/build adapter and compiled import_commit; reject stale native identities and unsupported capabilities.
• Preserve strict persistent signing, canonical unlock, retryable lifecycle, lossless integers, released reservation counts and source-build distribution.
• Shared adapter SHA-256: aaca114a52611d7fa909846690d7545424a81b09e3c7f072d8e9932e1d52f15a.

Verification

Source: ccf35531c191bdad88af4e4494b6d91a707e4957.

• New macOS arm64 debug native build, graph/header/provenance checks, offline canary, 14 wrapper/installer tests and declarations pass.
• Through WDK, real NIA/IFA/CFA/UDA on-chain incoming/outgoing settlement passes on the reused stack.
• Fresh IFA metadata import starts at zero; named receipt of 250000 units and strict send of 100000 settle to 150000/100000. Duplicate import preserves both balances. Malformed payloads are rejected.
• Five-platform optimized runtime run passes all targets. All downloaded reports match the current native identity: Node 22.23.2 on GNU/macOS, Node 24.18.1 on Alpine musl. CI uses PR merge ref 409d7b7; this is offline execution, not funded networking on every OS.

Remaining Gates

Draft, not production approval for Signet or mainnet. Existing same-process signer reopening, strict Lightning outbound signing, strict mature-output sweep and RGB force-close failures remain. Settled RGB balances remain stale after reorg in the recorded tests. These are documented failures, not fixes delivered by this import change.

Fresh-wallet qualification uses VSS-disabled regtest fixtures. Existing-wallet migration and physical-device runs are outside scope. Funded behavior on every OS, current mobile runtime/recovery coverage, production connectivity/asset admission, seed-only full discovery and independent release review remain separate gates.

Binding tracker and funded/adverse qualification distinguish historical passes from the current import identity.

Coordinated drafts: Bare #21, WDK #44, Iris #8.