fix(sdk-core): enforce recipient verification in ECDSA TSS signing

[mrdanish26]

Summary

Closes the ECDSA TSS default-path signing vulnerability (WCN-151 Phase 3)
where a compromised BitGo API server could swap signableHex undetected.

The Vulnerability

Both EcdsaUtils and EcdsaMPCv2Utils defaulted txParams when absent:

// Before — vulnerable
txParams: params.txParams || { recipients: [] }

With no txParams (Classic UI pending approval, Express), verifyTransaction()
gets an empty recipients list and skips all address/amount checks.

Root cause of prior failures: stale hardcoded arrays in coin-level overrides
were missing staking types, causing false throws on legitimate staking transactions.

Loki is authoritative. Kibana misses wallet-platform-admin-nocluster entries.

┌────────┬────────────────┬──────┬──────────────────┐
│  Coin  │    tx_type     │ Loki │      Status      │
├────────┼────────────────┼──────┼──────────────────┤
│ canton │ enableToken    │  206 │ already exempt   │
├────────┼────────────────┼──────┼──────────────────┤
│ sol    │ customTx       │  106 │ already exempt   │
├────────┼────────────────┼──────┼──────────────────┤
│ canton │ createAccount  │   89 │ added in this PR │
├────────┼────────────────┼──────┼──────────────────┤
│ sol    │ enableToken    │   22 │ already exempt   │
├────────┼────────────────┼──────┼──────────────────┤
│ canton │ transferAccept │    8 │ added in this PR │
├────────┼────────────────┼──────┼──────────────────┤
│ bsc    │ tokenApproval  │    6 │ already exempt   │
├────────┼────────────────┼──────┼──────────────────┤
│ hash   │ contractCall   │    3 │ added in this PR │
├────────┼────────────────┼──────┼──────────────────┤
│ ada    │ pledge         │    2 │ added in this PR │
├────────┼────────────────┼──────┼──────────────────┤
│ apt    │ customTx       │    2 │ already exempt   │
└────────┴────────────────┴──────┴──────────────────┘

Changes

Commit 1 — Enforce recipient verification

- recipientUtils.ts (new) — 27-type NO_RECIPIENT_TX_TYPES set and
resolveEffectiveTxParams(). Falls back to intent.recipients, resolves
txType from intent.intentType, propagates stakingRequestId, throws
InvalidTransactionError only when no recipients and no exemption applies.

- ecdsa.ts, ecdsaMPCv2.ts — replace vulnerable default:
txParams: resolveEffectiveTxParams(txRequest, params.txParams)

- bsc.ts, bscToken.ts, xdc.ts, xdcToken.ts, evmCoin.ts,
abstractEthLikeNewCoins.ts — replace stale hardcoded arrays with
NO_RECIPIENT_TX_TYPES.has(txParams.type) + stakingRequestId bypass.

- iBaseCoin.ts, baseTypes.ts, iWallet.ts — add
stakingRequestId?: string to TransactionParams, PopulatedIntent,
PrebuildTransactionResult.

Commit 2 — skipTssRecipientVerification opt-out flag

Safety-net for callers whose intent type has no explicit recipients. Lets
callers bypass verification without reverting the PR if a new type appears
outside NO_RECIPIENT_TX_TYPES.


Default behavior:

┌────────────────────────┬────────────────────────┐
│          Path          │      Enforcement       │
├────────────────────────┼────────────────────────┤
│ Direct SDK callers     │ ON (flag not set)      │
├────────────────────────┼────────────────────────┤
│ bitgo-ui (separate PR) │ OFF (flag set to true) │
└────────────────────────┴────────────────────────┘

Test Plan

- yarn test --filter=@bitgo/sdk-core passes
- Normal ETH/BTC send — address + amount still verified
- skipTssRecipientVerification: true — returns true immediately
- skipTssRecipientVerification not set — enforcement runs as before
- Post-deploy Loki: zero new "TSS signing with no intent recipients" hits
- TypeScript compiles clean across all affected packages

[linear-code]

WCN-151

[mohammadalfaiyazbitgo]

please trim this comment to only report context for a generic reader./

[mohammadalfaiyazbitgo]

redundant