Merge master key fingerprint syscall

[miketlk]

Summary

This PR adds support for the new OS syscall os_perso_get_master_key_identifier() for master key fingerprinting. It also restricts the key derivation path allowed to the Liquid Network app, since it's becomes unnecessary to derive the master pubkey to get the fingerprint.

Related Issues

• Closes 🧩 [INTEGRATION] Support master key fingerprint syscall #10
• Related to Add function to retrieve the master key fingerprint LedgerHQ/ledger-secure-sdk#821
• Related to Add a syscall to get the master public key identifier LedgerHQ/ledger-secure-sdk#1125
• Related to Switching to new Master Key Fingerprint Syscall + Derivation Path Hardening LedgerHQ/app-bitcoin-new#373

Changes

• Adds support for the os_perso_get_master_key_identifier() syscall
• Testnet/regtest: restricts key derivation paths to "*/1'"
• Liquid main network: restricts key derivation paths to "*/1776'"

Testing

Tests were updated to respect derivation path hardening. New snapshots were generated. Full test completion was achieved.

Limitations

Due to the outdated OS and SDK of the Nano S device, it's not supporting this feature. Possible workarounds are TBD.

Checklist

• Code builds without errors
• Tests added or updated
• Code reviewed for security and edge cases

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

Flag	Coverage Δ
unittests	82.26% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines	Coverage Δ
src/crypto.c	97.91% <ø> (ø)

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.