chore: clean up host code and protect SSO secrets

[pgherveou]

• Use canonical truapi::latest payload imports and direct test imports.
• Add zeroization on drop and secret-redacted Debug derives to existing SSO types.
• Simplify comments and expressions across the host code.
• Enforce Polkadot SDK Rust formatting with edition 2024 and JS host Prettier rules in CI; direct runtime feature gates let cargo fmt cover the runtime module tree.

[github-actions]

This pull request touches an app, which is not built by default. Add a label for each build you want:

• iOS simulator build, ios-simulator-build: builds the iOS app, runs its tests and attaches a build for the iOS Simulator on a Mac.
• iOS device build, ios-device-build: attaches a signed build that installs on a registered iPhone or iPad.
• Android build, android-device-build: attaches an APK that installs on an Android phone or an emulator.

Each starts as soon as it is added and follows the branch from then on.

[github-actions]

Bundle size report

Compared with main at 7944c68.

	Raw	Gzip	Brotli
truapi-host	7.87 MiB (+445 B)	5.65 MiB (+77 B)	5.38 MiB (-2.2 KiB)
truapi-provider	4.03 MiB	1.27 MiB (-1 B)	960.2 KiB (+365 B)
truapi	6.02 MiB	850.8 KiB	697.1 KiB
Total	17.92 MiB (+445 B)	7.76 MiB (+76 B)	7.00 MiB (-1.9 KiB)

WebAssembly modules

	Raw	Gzip	Brotli
truapi-host/wasm/web/truapi_server_bg.wasm	2.76 MiB (+445 B)	982.9 KiB (+76 B)	740.6 KiB (-2.2 KiB, -0.3%)
truapi-host/wasm/web/truapi_verifiable_bg.wasm	4.89 MiB	4.64 MiB	4.61 MiB
truapi-provider/truapi_provider_bg.wasm	3.99 MiB	1.26 MiB (-1 B)	952.4 KiB (+365 B)

Changed files (1)

	Raw	Gzip	Brotli
truapi-host/wasm/web/truapi_server_bg.wasm	2.76 MiB (+445 B)	982.9 KiB (+76 B)	740.6 KiB (-2.2 KiB, -0.3%)

_{Commit: 636c15c}

[github-actions]

CI Status: 24 required jobs green, 23 passed and 1 skipped by path filter.

All job results

job	result
android-bindings	success
bundle-size	success
changes	success
changeset-guard	success
cli-package	success
codegen	success
e2e	skipped
explorer	success
headless-install	success
host-android-bindings	success
host-android-detekt	success
host-wasm	success
ios-bindings	success
ios-swift	success
licenses	success
playground	success
provider-android-bindings	success
release-guard	success
rust	success
ts-client	success
ts-debugger	success
ts-host	success
wasm-provider	success
workflow-lint	success

Signing credentials: failure as of 2026-10-12, a release may fail

_{Commit 636c15cb · run log}