Cardano Updates

* chore: ignore mostly irrelevant vulnerabilities for now and remove unneeded ones

* chore(cred-serv): audit fixes

* chore: update ignore list for osv scanner

* chore(gha/depcheck): ignore osv-scanner dev depends until end of 01/2026 when they can be re-reviewed

* chore(gha/depcheck-owasp): added owasp depcheck for package[-lock].json

* chore(gha/depcheck-owasp): changed android specific job to scan any jar file in the repo/depends

* chore(gha/depcheck-owasp): changed ios specific job to check Podfile.lock only (tho currently it checks zero depends for some reason)

* chore(gha/depcheck-owasp): change android job to only look into jar files in android/ and node_modules/

* chore(gha/depcheck-owasp-ios): fix report upload

* fix: package-lock.json

* fix: resolve high-severity vulnerabilities for qs and axios

* feat: update JavaScript dependencies to allow minor versions

* fix: resolve production vulnerabilities and stabilize CI scanners

* fix: resolve CI vulnerabilities and fix lockfile synchronization

* fix:  CI lockfile sync and OWASP dependency-check failures

* fix: extend OSV scanner vulnerability ignore dates

* feat: relax Appium dependency version constraints.

* ifx: update dependency vulnerability suppression rules

* fix: CI lockfile sync, OWASP scan failures, and configuration cleanup

* fix: fix vulnerabilities and repair broken CI scans

* fix: vulnerabilities and repair broken CI scans

* fix: override dep @types/qs

---------

Co-authored-by: Roberto C. Morano <[email protected]>
Co-authored-by: J Caso <[email protected]>

* Add group profile onboarding E2E: feature files, remote-initiator helper, ssi-agent-urls

* updated the helper, steps

* updated the test

* added contract

* test: split group profile features and backend step definitions

* chore(test): added createBackendUser and createRemoteInitiator interfaces

* chore: add support for witness config

* fixed getOObi, added agent role in init

* chore: eventual acceptGroupInvitation fix

* fix: Joiner business logic

* fix: add endRole sign from remoteJoiner aafter group creation

* test: normalize tests for Initiator creates multisig group and it becomes active

* test: fix the step "all members accept the group invitation"

* test(e2e): address PR comments

---------

Co-authored-by: Ankit Shukla <[email protected]>
Co-authored-by: Ankit Shukla <[email protected]>
Co-authored-by: Ankit Shukla <[email protected]>

Co-authored-by: Sotatek-DukeVu <[email protected]>

* feat(ui): fix animation centering in credential acceptance screen

* fix(ui): fix wrong translateY position when keyboard is showing

* fix(ui): fix review comments

---------

Co-authored-by: Sotatek-DukeVu <[email protected]>