Merge master key fingerprint syscall and remove Nano S support

[miketlk]

Summary

This PR aligns liquid_release with the new master key fingerprint syscall, applies the finalized derivation path restrictions for Liquid, and removes support of the Nano S (EOL).

Reference

• See Merge master key fingerprint syscall #11 on liquid_develop for full context, rationale, and testing details.

Notes

• No additional functionality beyond what was already reviewed in liquid_develop
• Nano S removal is intentional due to outdated OS/SDK and incompatibility with the new syscall

Checklist

• Code builds without errors
• No development-only or legacy artifacts introduced

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

Flag	Coverage Δ
unittests	82.26% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines	Coverage Δ
src/crypto.c	97.91% <ø> (ø)

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.