- skip SPA fallback for `/install` and `/install/*` in main server
- keep install wizard accessible only during `RunInstallServer` phase
- prevent post-install access to install UI
- Rewrite Solana scanner: stateless scan with processed-signature cache, query wallet + USDT ATA + USDC ATA addresses to cover all SPL transfers
- Add network field to transaction_lock (4-tuple unique index) and order flow
- Add wallet management endpoints (add/list/get/status/delete) with token auth
- Add network info to Telegram payment notification
- Add USDC hint to test script GMPay prompt
- Add API docs and Solana scanning docs