feat: adopt Enbox 0.8.28 wallet capabilities

[LiranCohen]

Summary

• update all direct Enbox dependencies to the latest synchronized patch release set
• replace the hand-written public-profile loader with the bounded createProfileReader abstraction and authorized direct media reads
• show per-remote sync health, quota failures, activity, and targeted retry controls on identity overviews
• use local DWN message subscriptions to refresh profile, social, connect, protocol, permission, activity, and encrypted-access caches across sync and browser tabs
• drain every social-graph query with records.queryAll() so friends, blocks, groups, and members are no longer truncated at 200 records
• audit encrypted role-audience key delivery in the Permissions tab and let identity owners repair confirmed missing delivery without rewriting role records

Security and behavior notes

• unpublished profile media is read only through the authorized reader path
• delegated message subscriptions stay single-protocol so their grants remain correctly scoped
• delegate sessions report encrypted delivery as unverifiable instead of treating visibility-filtered results as missing
• repair is owner-only, preventing a blind delegate repair from creating duplicate delivery records
• failed protocol inspection is surfaced as an error instead of a misleading empty state
• no data migration is required

Test plan

• bun install --frozen-lockfile
• bun run lint (zero errors; pre-existing warning set unchanged)
• bunx tsc --noEmit
• bun run test:coverage (748 passed, 10 skipped)
• bun run build
• bun run test:e2e (28 passed across desktop and mobile Chromium)

[github-actions]

Coverage Report

Status	Category	Percentage	Covered / Total
🟢	Lines	68.34% (🎯 25%)	3409 / 4988
🟢	Statements	66.32% (🎯 25%)	3605 / 5435
🟢	Functions	64.93% (🎯 30%)	1039 / 1600
🟢	Branches	62.79% (🎯 29%)	2277 / 3626

File Coverage

File	Stmts	Branches	Functions	Lines	Uncovered Lines
Changed Files
src/App.tsx	64.96%	52%	62.5%	64.61%	69-82, 99-100, 107, 152-154, 188-193, 200-201, 207-214, 244-253, 259, 291-306, 318, 324-337, 359
src/enbox/audience-key-delivery.ts	93.61%	91.11%	100%	93.61%	92, 97, 142
src/enbox/social-graph.ts	53.5%	43.15%	56.41%	56.25%	135, 140, 151, 152, 160, 165-168, 179-182, 188, 199-221, 227, 302, 315, 323, 334, 342, 353, 361, 363, 391, 394, 486-491, 495-499, 514-680, 720-725, 739-770
src/enbox/hooks/use-audience-key-delivery.ts	75%	100%	60%	75%	22-26
src/enbox/hooks/use-remote-sync-status.ts	100%	100%	100%	100%
src/enbox/hooks/use-sync-query-invalidation.ts	82.14%	57.35%	83.33%	81.65%	53-54, 62-70, 126, 132, 204-205, 209-212, 225-234, 267-268, 279, 283
src/enbox/queries/query-keys.ts	100%	100%	100%	100%
src/features/identities/tabs/AudienceKeyDeliveryPanel.tsx	92.59%	74.19%	100%	92.59%	83, 97-99
src/features/identities/tabs/OverviewTab.tsx	76.92%	66.66%	100%	76.92%	28, 32, 36-52
src/features/identities/tabs/PermissionsTab.tsx	50%	42.85%	41.66%	53.33%	45, 47, 62, 64-68, 77-81, 116, 141, 164, 259, 327-348, 384, 388, 396-407, 412-415, 425, 429, 454-505
src/features/identities/tabs/RemoteSyncStatusPanel.tsx	73.52%	61.36%	100%	75%	37, 44-49, 58-59, 62, 76
src/features/search/public-profile.ts	100%	83.33%	100%	100%

Generated in workflow #417 for commit 8e3814f by the Vitest Coverage Report Action