security: round 3 hardening (CSRF double-submit, TRX MITM, container hardening)

apps/api/package.json

@@ -11,11 +11,14 @@
   },
   "dependencies": {
     "@solana/web3.js": "^1.98.4",
+    "bip32": "^4.0.0",
+    "bip39": "^3.1.0",
     "bitcoinjs-lib": "^6.1.5",
     "bs58": "^6.0.0",
     "cookie-parser": "^1.4.7",
     "cors": "^2.8.5",
     "dotenv": "^16.4.0",
+    "ed25519-hd-key": "^1.3.0",
     "ethers": "5.7.2",
     "express": "^4.21.0",
     "express-rate-limit": "^8.4.1",
@@ -24,6 +27,7 @@
     "knex": "^3.1.0",
     "pg": "^8.13.0",
     "swagger-ui-express": "^5.0.1",
+    "tiny-secp256k1": "^2.2.3",
     "ulidx": "^2.4.1"
   },
   "devDependencies": {