chore(extensions): migrate to @signinwithethereum/siwe (x402-foundation#1917)

* Migrate to @signinwithethereum/siwe

Migrate the SIWE dependency to the Ethereum Identity Foundation package. package.json now depends on @signinwithethereum/siwe; evm.ts import was updated to import SiweMessage from the new package. Added a changeset describing the migration. (pnpm lock updated to reflect the dependency change.)

* Add siwe v4.1.0 entries to pnpm-lock

Update examples/typescript/pnpm-lock.yaml to add @signinwithethereum/siwe@4.1.0 and @signinwithethereum/siwe-parser@4.1.0. Adds package resolutions and snapshot entries, registers peerDependencies (ethers and viem marked optional), and removes the older siwe@2.3.2 entry in the importer. This pins the example project to the siwe v4 parser/runtime and records its dependency graph in the lockfile.

Author: caveman-eth

examples/typescript/pnpm-lock.yaml

@@ -0,0 +1,5 @@
+---
+'@x402/extensions': patch
+---
+
+Migrate SIWE dependency from `siwe` (Spruce) to `@signinwithethereum/siwe` (Ethereum Identity Foundation). The new package is the official successor, supports viem natively as a peer dependency, and maintains the same `SiweMessage` API.

typescript/.changeset/migrate-siwe-to-eif.md

@@ -48,7 +48,7 @@
     "@x402/core": "workspace:~",
     "ajv": "^8.17.1",
     "jose": "^5.9.6",
-    "siwe": "^2.3.2",
+    "@signinwithethereum/siwe": "^4.1.0",
     "tweetnacl": "^1.0.3",
     "viem": "^2.43.5",
     "zod": "^3.24.2"

typescript/packages/extensions/package.json

@@ -6,7 +6,7 @@
  */
 
 import { verifyMessage } from "viem";
-import { SiweMessage } from "siwe";
+import { SiweMessage } from "@signinwithethereum/siwe";
 import type { EVMMessageVerifier } from "./types";
 import type { CompleteSIWxInfo } from "./client";
 import type { SIWxSigner } from "./sign";