Add private reserve lifecycle support to SDK Outpost

[joshglogau]

Summary

Adds the external reserve lifecycle required by private reserve pairs, stacked on #56.

• adds Ethereum native/ERC-20 reserve creation, pending cancellation, and normalized reads
• validates compressed creator keys and configured ERC-20 token routes before approval or submission
• adds Solana deployment-backed token discovery, canonical PDA derivation, reserve creation, pending cancellation, and normalized reads
• requires a real configured SPL mint as the native-SOL account marker so Anchor account validation remains valid
• adds an SDK Core helper for atomically matching multiple pending reserves in one Wire transaction
• reuses the shared Solana reserve-address derivation in swap submissions
• documents current protocol behavior: private is a routing constraint, WIRE cannot be a private endpoint, pending creation can be cancelled, and activated reserves have no creator exit

Validation

• pnpm lint
• pnpm build
• SDK Core: 53 suites / 552 tests
• SDK Outpost: 10 suites / 51 tests
• SDK Outpost package-boundary and entrypoint verification
• git diff --check

Release prerequisite

CI cannot complete its frozen install until @wireio/outpost-ethereum-artifacts@0.1.0 and @wireio/outpost-solana-artifacts@0.1.0 are published. The current CI failure is the expected lockfile mismatch for those unavailable packages.

• Ethereum artifact producer: https://github.com/Wire-Network/wire-ethereum/pull/176
• Solana artifact producer: https://github.com/Wire-Network/wire-solana/pull/414

After both packages publish, regenerate the lockfile against the registry versions and rerun CI. Local validation above used the matching sibling artifacts.