Bump wasm-bindgen and fix patch.mjs to handle new wasm-bindgen output format

[Copilot]

This PR bumps wasm-bindgen¹ and related dependencies (js-sys, web-sys).

Due to changes in wasm-bindgen, our patch.mjs and patch_async.mjs needed updating too. Below is an LLM summary of these changes:

---

wasm-bindgen 0.2.108 changed its CJS output format, breaking the patch.mjs/patch_async.mjs CJS→ESM transform scripts.

Key differences in newer wasm-bindgen output:

• exports.XXX = XXX; instead of module.exports.XXX = ...
• const wasmPath/const wasmBytes instead of const path/const bytes
• No var exports = module.exports preamble

Changes to src/bin/patch.mjs and src/bin/patch_async.mjs

• Export enums inline — match Object.freeze declarations and add export keyword directly, replacing the duplicate re-export approach that caused the name collision
• Export standalone functions — use a callback-based regex to detect functions with corresponding exports.XXX = XXX; lines and add export to their declarations
• Map exports.* → imports.* — convert bare exports.XXX = XXX; (undefined in ESM scope) to imports.XXX = XXX; for the globalThis.pubky registry
• Define const imports = {} at top of generated ESM output (no longer provided by wasm-bindgen boilerplate)
• Broaden wasm-loading regex to match both old (const path/const bytes) and new (const wasmPath/const wasmBytes) variable names, capturing the actual bytes variable name for use in the replacement

// Export enums (Object.freeze declarations)
.replace(/\nconst (\w+) = Object\.freeze/g, "\nexport const $1 = Object.freeze")
// Export standalone functions that are assigned to exports
.replace(/\nfunction (\w+)\(/g, (match, name, offset, str) => {
  if (str.includes(`exports.${name} = ${name};`)) {
    return `\nexport function ${name}(`;
  }
  return match;
})
// Replace exports.X = X; with imports.X = X; (for newer wasm-bindgen)
.replace(/\nexports\.(\w+) = (\w+);/g, "\nimports.$1 = $2;")

Footnotes

1. See changelog (0.2.100 - 0.2.108): https://github.com/wasm-bindgen/wasm-bindgen/blob/main/CHANGELOG.md ↩

[ok300]

I updated these dependencies to latest and re-generated the patch fixes.

The new patch changes are considerably smaller and simpler than the previous version of this PR (see diff).