Upgrade Node native candidate to RLN v0.17.0-beta.3 with verified artifact loading

[Jainakin]

Upgrade the unpublished Node package to 0.2.0-beta.4 using RLN v0.17.0-beta.3 (ecc69f20308231400561f6f060fea88acfa40cc4), compatible LDK 79b9eb5166546c62692d3a672986f385c7fe047d, and rgb-lib v0.3.0-beta.50-bfa (1b951af0c8233308c919975552487be19ad2a930). The matching eight-file C-FFI adapter preserves native core behavior and the approved API surface; exact source, wrapper and lock identities are checked before SDK handle creation.

Make macOS 27 builds reliable: preserve compile-time proc-macro libraries, strip final Darwin addons with the Apple linker, and validate Mach-O LINKEDIT bounds/alignment. Consumers now verify sidecar identity, build recipe, binary hash and platform layout before dlopen, including when install scripts were skipped. Valid release/debug artifacts are admitted independently of application --debug; release packaging still requires optimized artifacts.

Validation:

• All five optimized Node targets pass, and the complete imported five-target artifact/hash/provenance gate passes without restamping. Both GNU binaries independently require at most glibc 2.34; musl has no GLIBC dependency.
• Final wrapper 3647ddc882ff0e04133f69d14123f2dba3c111ca31d47ffc4946a4bf402ef30d / recipe 07c989d17d2bf6be5cbb6d9e491937316dd67a68dd09aafa755aa91dc4ec7a84: 29 unit checks, declarations and actual Node 22.23.3 native canaries on both macOS 27 ARM64 and Intel through Rosetta pass.
• Clean packed WDK/Node consumer passes. Final ARM64 funded suite completes 13 scenarios: nine pass; signer reopen, RGB rollback, witness pending accounting and BFA event order fail and remain release gates. The independently rebuilt beta.50 validator accepts the new burn proof, rejects withheld FundsIn at consensus validation, and rejects wrong recipient/amount metadata.

Native security and distribution gates remain open. Passing builds, offline canaries and timing-specific recovery tests do not constitute production approval. Exact artifacts, provenance and failed gates remain reviewable; previous rejected/historical binaries are not restamped or relabeled.

This updates the existing draft PR. No merge, tag, registry publication or GitHub release is included.