feat(trezor): add hidden-wallet passphrase selection and on-chain watcher

[coreyphillips]

Description

Adds Trezor hidden-wallet passphrase selection and an on-chain event watcher, built on bitkit-core 0.1.66 (bumped from 0.1.64), which provides the WalletSelection / PassphraseResponse types and the on-chain watcher FFI.

Hidden-wallet / passphrase rework

• Replaces the old blocking passphrase prompt with a proactive wallet-mode model that mirrors bitkit-android.
• The user picks Standard, passphrase on phone, or passphrase on device up front via a selector + confirmation dialog.
• The selection is bound to the THP session at connect time (currentSelection()); legacy (non-THP) devices that re-request the passphrase mid-operation are answered from the same stored value, keeping both paths in lockstep.
• Switching modes resets the device session (disconnect → reconnect), since the Trezor caches the passphrase for the lifetime of a session.
• Removes the now-dead needsPassphrasePublisher / submitPassphrase / acknowledgeOnDevicePassphrase plumbing.

On-chain event watcher

• New "Event Watcher" section subscribes an xpub to live Electrum updates with no device connected. Shows balance, block height, account type, transaction count, recent transactions, and a rolling event log.
• TrezorEventListener bridges the Rust background callback onto @MainActor.
• The watcher remains available across Trezor connects/disconnects, is stopped explicitly via Stop Watching, and is torn down on network switch.
• The account-type selector can override ambiguous xpub/tpub lookups for balance, history, transaction detail, and watcher startup.

Fixes

• PIN pad now supports up to 50 digits (the real Trezor limit), with dots that wrap across rows instead of overflowing a single line.

Changelog

• Added changelog.d/next/574.added.md.

Dependencies

• bitkit-core 0.1.66 (Package.resolved + project.pbxproj updated).

[jvsena42]

Starting review

[jvsena42]

could've reused existing UI components like CaptionMText / CaptionText / BodySText / FootnoteText / PrimaryButtonView / SecondaryButtonView / RectangleButton
Not blocking for this PR because the previous Trezor dev screens were also implemented like this, but could be a follow up PR

[coreyphillips]

see #574 (comment)

Addressed in this commit.

[jvsena42]

Tested

• Test vectors
• Taproot
  • Set tpub
  • Don't recognized in auto mode (expected)
  • switch to Taproot type
  • Transactions and balance tracked
  • Received taproot transaction
  • Event recognized
  • Mined 1 block
  • Confirmed and unconfirmed balances updated
• Native Segwit
  • Set pub
  • Auto mode worked
  • switch to Segwit type
  • Transactions and balance tracked
  • Received segwit transaction
  • Event recognized
  • Mined 1 block
  • Confirmed and unconfirmed balances updated

[ovitrif]

Could we move this cleanup to TrezorRootView or another stable parent that only disappears when the whole Trezor dashboard closes? TrezorContentSwitcher switches between TrezorConnectedView and TrezorDeviceListView when trezor.isConnected changes, so this can call handleDashboardDismiss() during normal connect/disconnect and stop/clear the watcher even though disconnect() says it should survive disconnects.

[coreyphillips]

Addressed in this commit.

[ovitrif]

Could we also clear or quarantine startingWatcherId when stopWatcher() is called before activeWatcherId exists? Right now network changes and dashboard cleanup only set shouldStopStartingWatcher, but handleWatcherEvent() still accepts events for startingWatcherId, so a canceled startup can still repopulate balance or transaction state until the native start call returns.

[coreyphillips]

Addressed in this commit.