fix(types): align public API types with what the code returns - #955

## Description

Two public type corrections carried back from the v5 line (#955), shaped
so that nothing is removed from this stable major. The point is partly
the fixes themselves and partly keeping the two lines' type shapes
aligned so future backports apply cleanly.

## Changes

- **`nut08Change` moves onto `MeltProofsConfig`.** `meltProofs`,
`meltProofsBolt11`, `meltProofsBolt12` and `meltProofsOnchain` all take
`MeltProofsConfig` and forward it wholesale to `prepareMelt`, which took
the wider `PrepareMeltConfig`. So the option already worked at runtime
through every helper but could not be expressed in TypeScript.
`PrepareMeltConfig` remains, as a deprecated alias of
`MeltProofsConfig`, so no import breaks.
- **`NUT10Option.tags` and `RawNUT10Option.t` are optional.** NUT-10
marks `tags` optional and NUT-18 describes `t` as "optional NUT-10
payment tags". The implementation already agreed: `utils/tlv.ts`
declares its internal `Nut10SpendingCondition.tags` optional and
deliberately returns `undefined` when absent, and every read site guards
with `?? []` or a length check. Decoding a spec-valid request that omits
tags therefore produced an object that violated its own declared type.

## Reviewer Notes

- Nothing is removed from the public surface. The API report diff is
additive apart from the two fields becoming optional and
`PrepareMeltConfig` collapsing to an alias.
- The one compatibility wrinkle: TypeScript consumers who *read*
`nut10.tags` now see `string[][] | undefined` and need a guard. That is
the truth they were already exposed to at runtime, and
`PaymentRequestTransport.tags` on this line is already optional, so it
also removes an internal inconsistency.
- In v5 `PrepareMeltConfig` is removed outright rather than aliased,
which the v5 migration guide now records.
- Verified on this branch: `src/` type checks clean, node suite passes
62 files and 2077 tests, lint and format clean, `api:update` run and
committed.

Mostly a hardening release: input validation and parsing fixes across auth, crypto, transport and wallet. It also adds CounterSource.reserveAt for claiming manual counter ranges atomically, dual-licenses the package MIT OR Apache-2.0, and carries six breaking changes since rc.5, all documented in the migration guide.

---

##
[5.0.0-rc.6](v5.0.0-rc.5...v5.0.0-rc.6)
(2026-08-12)


### Features

* **wallet:** claim manual counter ranges up front with
CounterSource.reserveAt
([#923](#923))
([8bee5dc](8bee5dc))


### Bug Fixes

* **auth:** coerce the device-flow polling interval to a finite value
([#929](#929))
([d2c3d9f](d2c3d9f))
* **auth:** detach the OIDC token listener when the provider is replaced
([#939](#939))
([ae9ea8b](ae9ea8b))
* **auth:** drop a CAT refresh that completes after the session changes
([#927](#927))
([7443daf](7443daf))
* **auth:** stop following redirects on token-bearing requests
([#926](#926))
([ac80863](ac80863))
* **auth:** validate OIDC provider URLs use an http(s) scheme
([#896](#896))
([11cf24d](11cf24d))
* **crypto:** bound pow2height in createNewMintKeys at runtime
([#938](#938))
([5bade9a](5bade9a))
* **crypto:** bound the deterministic counter to the safe integer range
([#919](#919))
([54871f6](54871f6))
* **crypto:** count unique signers by x-only pubkey identity
([#904](#904))
([673468f](673468f))
* **crypto:** harden HTLC witness parsing edge cases
([#892](#892))
([52b51ea](52b51ea))
* **crypto:** require a 64-byte seed and slim the seed error context
([#920](#920))
([640b8fe](640b8fe))
* **crypto:** tighten NUT-10 secret and tag-integer parsing
([#893](#893))
([6e1dfaf](6e1dfaf))
* **crypto:** validate the blind point in the BLS signer
([#931](#931))
([4b49e08](4b49e08))
* guard CBOR and keyset map lookups against prototype-chain keys
([#895](#895))
([3798e44](3798e44))
* **logger:** escape control characters in log messages
([#906](#906))
([cc89ad3](cc89ad3))
* **mintinfo:** bound mint-advertised method and endpoint lists
([#928](#928))
([2647472](2647472))
* **p2bk:** share one ephemeral key across a blinded SIG_ALL batch
([#946](#946))
([9189f36](9189f36))
* tidy response reads and number-token parsing
([#886](#886))
([24e1593](24e1593))
* **token:** return per-proof amounts, not proofs, from getTokenMetadata
([#941](#941))
([2f00216](2f00216))
* **types:** align public API types with what the code returns
([#955](#955))
([98f8994](98f8994))
* **utils:** align base64 fallback chunk size to a 3-byte boundary
([#905](#905))
([6107ad7](6107ad7))
* **utils:** cap JSON nesting depth in JSONInt.parse
([#907](#907))
([c7b3589](c7b3589))
* **wallet:** check bolt11 quote amounts against the invoice
([#925](#925))
([503ea70](503ea70))
* **wallet:** harden P2PK spending-condition locktime and tag validation
([#894](#894))
([6985fa1](6985fa1))
* **wallet:** name the offending index when rejecting duplicate proofs
([#917](#917))
([308d441](308d441))
* **wallet:** reject duplicate proofs before totalling or selecting
([#916](#916))
([dd34ef9](dd34ef9))
* **wallet:** reject extraPayload keys reserved by the melt request
([#908](#908))
([e85314e](e85314e))
* **ws:** ignore socket events from a replaced connection
([#930](#930))
([f6c8775](f6c8775))


### Performance Improvements

* **wallet:** look up keyset unit by map instead of scanning ids
([#909](#909))
([ec6fc8b](ec6fc8b))