EMBED-89: update dependencies (auth, controllers)

[tanguyenvn]

Jira Link

EMBED-89

Description

This branch brings dependency and tooling updates across the monorepo and demos, plus targeted fixes and repo hygiene.

• Dependencies: Upgrade @toruslabs/* controllers, @web3auth/auth, WalletConnect, Solana (@solana/kit and related), Wagmi/Viem, MetaMask SDK/providers, and other transitive bumps; align demo/vue-app-new (including package-lock.json) and bump @web3auth/auth in demo/vite-react-app-sfa.
• Demos / local packages: Use local file: links where appropriate (e.g. packages/no-modal, web3auth-ws-embed tarball) to exercise in-repo packages; track web3auth-ws-embed-*.tgz via .gitignore exception where needed.
• Product code: Refactor no-modal middleware typing (MiddlewareParams<JRPCRequest<...>>); fix auth connector login behavior.
• Governance: Add .github/CODEOWNERS (product vs admins for sensitive paths). Replace per-template PR files with a single .github/PULL_REQUEST_TEMPLATE.md.

How has this been tested?

Screenshots (if appropriate)

N/A — no user-facing UI changes intended (update if applicable).

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)

Checklist

• My code follows the code style of this project. (run lint)
• My change requires a change to the documentation.
• I have updated the documentation accordingly.
• I have added tests to cover my changes.
• All new and existing tests passed.

---

Note

Medium Risk
Moderate risk due to upgrading the CI/runtime baseline to Node 24 and pulling in major-version updates across @web3auth/*/@toruslabs/* dependencies, which can cause build or runtime regressions in demos and packages.

Overview
Updates repo governance and contribution workflow by adding .github/CODEOWNERS, consolidating PR templates into .github/PULL_REQUEST_TEMPLATE.md, and ensuring formatting tools ignore .github/CODEOWNERS.

Modernizes tooling by bumping CI to Node 24.x (and updating actions/checkout/setup-node), updating .nvmrc to >=24.x, and tweaking .gitignore to allow committing web3auth-ws-embed-*.tgz artifacts.

Refreshes demo dependencies/locks, including upgrading to @web3auth/auth@^11.4.2, moving the Vite SFA demo from @web3auth/sign-in-with-ethereum to @web3auth/sign-in-with-web3, and updating related WalletConnect/Wagmi/Viem/Solana/TorusLabs packages (including local file: usage for @web3auth/ws-embed tarballs in locks).

^{Written by Cursor Bugbot for commit 6a16072. This will update automatically on new commits. Configure here.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
web3auth-web	Ready	Preview, Comment	Mar 27, 2026 4:55am

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

There are 4 total unresolved issues (including 3 from previous reviews).

^{Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}