chore(sdk/js)!: make solana/viem/curves peers truly opt-in

move @solana/web3.js, viem, and @noble/curves out of
optionalDependencies into peerDependencies (with optional meta). they
were auto-installed by npm despite the "optional" label, dragging ~70
transitive packages into every downstream install. now a bare
`npm install @phala/dstack-sdk` pulls only @noble/hashes.

consumers that import /solana, /viem, /encrypt-env-vars, or
/verify-env-encrypt-public-key submodules must install the matching
peer explicitly.

Author: Leechael

sdk/js/bun.lock

@@ -97,28 +97,29 @@
   "author": "Leechael Yim",
   "license": "Apache-2.0",
   "devDependencies": {
+    "@noble/curves": "^1.8.1",
+    "@noble/hashes": "^1.6.1",
+    "@solana/web3.js": "^1.98.4",
     "@types/node": "latest",
     "typescript": "^5.7.0",
+    "viem": "^2.43.3",
     "vitest": "^3.2.4"
   },
-  "optionalDependencies": {
+  "peerDependencies": {
     "@noble/curves": "^1.8.1",
+    "@noble/hashes": "^1.6.1",
     "@solana/web3.js": "^1.98.4",
     "viem": "^2.43.3"
   },
-  "peerDependencies": {
-    "@noble/curves": "^1.8.1",
-    "@noble/hashes": "^1.6.1"
-  },
   "peerDependenciesMeta": {
-    "viem": {
-      "optional": true
-    },
     "@noble/curves": {
       "optional": true
     },
     "@solana/web3.js": {
       "optional": true
+    },
+    "viem": {
+      "optional": true
     }
   }
 }