feat(cli): add TAP request signing

[nkavian]

Summary

• add capability-aware Trusted Agent Protocol request signing across supported discovery, enrollment, and payment requests
• preserve signed transport across redirects, redact TAP authorization data, and cache server CLI capabilities
• update the AEP, ODP, MPP, and x402 SDK dependencies
• show responsive progress while AEP enrollment and grant operations are running
• preserve Service identifiers and payment-origin declarations in directory results

Verification

• pnpm typecheck
• pnpm lint
• pnpm test
• pnpm typedoc
• pnpm coverage:changed — 96.46% changed-line coverage (90% required)

[codecov]

Codecov Report

❌ Patch coverage is 91.58249% with 50 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
packages/cli/src/commands/inspect/index.tsx	75.92%	13 Missing ⚠️
packages/core/src/tap-request.ts	94.47%	9 Missing and 2 partials ⚠️
packages/core/src/resources/tap.ts	91.07%	5 Missing ⚠️
packages/cli/src/commands/aep/runtime.tsx	95.12%	3 Missing and 1 partial ⚠️
packages/core/src/flows/mpp-pay.ts	71.42%	3 Missing and 1 partial ⚠️
packages/cli/src/commands/aep/index.tsx	93.75%	2 Missing and 1 partial ⚠️
packages/core/src/resources/cli-capabilities.ts	95.08%	2 Missing and 1 partial ⚠️
packages/cli/src/startup-vault.ts	0.00%	1 Missing and 1 partial ⚠️
packages/core/src/aep/storage.ts	0.00%	2 Missing ⚠️
packages/core/src/flows/aep-fetch.ts	0.00%	1 Missing ⚠️
... and 2 more

📢 Thoughts on this report? Let us know!