feat(makalu): harden Thanos wallet discovery

[bachal-mb]

Summary

• add a verified window.thanos fallback alongside EIP-6963 discovery
• cover late EIP-6963 announcements and the official injected-provider fallback
• add the MX-03 wallet-team acceptance record and update the living handoff

Verification

• Published Chrome extension: 0.9.33 (checked 2026-08-14)
• Matching source commit: imasssad/Thanos-Wallet@c352a5cfef22
• Makalu production secret gate: present, non-placeholder, >=32 characters (value not exposed)
• Live: /signin 200; nonce 200/valid format; unauthenticated /api/auth/me 401
• API: 6 focused tests passed; TypeScript build passed
• Explorer: all 128 tests passed
• Next.js compiled and type-checked; Windows standalone trace copy then hit the known local symlink-permission gate (EPERM)

Remaining external acceptance

• wallet-team browser/restart matrix on published Thanos 0.9.33
• one approved low-value Makalu transaction and Lithoscan evidence
• named wallet-team approval

[github-actions]

Test Results

Package	Passed	Failed	Skipped	Total	Duration
api	no results
indexer	no results
explorer	no results

Coverage

Package	Stmts %	Branch %	Funcs %	Lines %
api	no coverage
indexer	no coverage
explorer	no coverage

_{Generated by ci.yaml for 6ccf544b9652a6e4373a23ed4838499247a2f600. Test JSON + coverage HTML are uploaded as run artifacts.}