feat(phase1): wallet scanner — scan API, classifier, token fetch, web UI

- @pyre/core: conservative classifier (classifyTokenAccount) + types + risk
  constants. EMPTY only when truly empty + classic-SPL + not frozen/delegated;
  Token-2022/unknown → UNSUPPORTED; frozen/delegated/NFT/valuable/over-threshold
  → PROTECTED_SKIP; TRANSMUTABLE only via explicit route hook (none in MVP).
  43 unit tests incl. a "never says safe" assertion.
- @pyre/solana: parseTokenAccounts (SPL + Token-2022 detection, NFT heuristic,
  rent, defensive owner cross-check) + tests. Tx builders remain Phase-2 stubs.
- @pyre/config: loadConfig() from env.
- @pyre/api: POST /api/scan — validates pubkey, recomputes classification
  server-side, CORS + rate-limit; DB persistence deferred. Live-RPC smoke OK.
- @pyre/web: wallet-connect (Wallet Standard) + grouped scan UI, ember theme,
  trust wording (no "safe"); next.config transpiles @pyre/core; prod build OK.

Built by 4 agents on a locked core contract; 2 audit agents (security: SOUND;
build: 1 blocker → fixed). Stripped .js import extensions in @pyre/core so
Turbopack resolves the source package. All typecheck + tests + build green.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

infra/status/status.json

@@ -23,14 +23,15 @@
     {
       "id": 1,
       "name": "Wallet Scanner",
-      "state": "todo",
+      "state": "in_progress",
       "items": [
-        { "label": "Wallet connect frontend", "done": false },
-        { "label": "Scan endpoint", "done": false },
-        { "label": "Token account fetch", "done": false },
-        { "label": "Basic classification", "done": false },
-        { "label": "Scan results UI", "done": false },
-        { "label": "Protected/skipped UI", "done": false }
+        { "label": "Wallet connect frontend", "done": true },
+        { "label": "Scan endpoint (POST /api/scan)", "done": true },
+        { "label": "Token account fetch (SPL + Token-2022 detect)", "done": true },
+        { "label": "Basic classification (conservative, 43 tests)", "done": true },
+        { "label": "Scan results UI (grouped)", "done": true },
+        { "label": "Protected/skipped UI", "done": true },
+        { "label": "Deploy app + live-wallet e2e verification", "done": false }
       ]
     },
     {