Fix Hedera false-positive seed verification and update dependencies for Python 3.9/3.14 CI

[Copilot]

Multiple CI failures across workflows: intermittent Hedera test failure on Windows 3.10, click==8.2.1 incompatible with Python 3.9, pydantic-core==2.33.2 lacks Python 3.14 wheels, and Termux Full builds failing on maturin cross-compilation misdetection.

Hedera seed verification bug (btcrseed.py)

_hedera_require_key_bound_match was inverted — set to not key_bound_target_present instead of key_bound_target_present. When both account IDs and hex addresses are provided, deterministic matches (solidity bytes, account strings) always succeed for the correct account index regardless of seed. The inverted flag meant weak matches alone were accepted, causing ~0.4% false-positive rate per random mnemonic passing BIP39 checksum.

# Before (broken): key-bound targets present → don't require key-bound match → any seed matches
self._hedera_require_key_bound_match = not key_bound_target_present

# After (fixed): key-bound targets present → require key-bound match alongside weak match
self._hedera_require_key_bound_match = key_bound_target_present

Dependency updates (requirements-full.txt)

• click 8.2.1 → 8.1.8 — 8.2.x requires Python ≥3.10
• pydantic 2.11.7 → 2.12.5, pydantic-core 2.33.2 → 2.41.5 — adds pre-built Python 3.14 wheels
• typing-inspection 0.4.1 → 0.4.2 — required by pydantic 2.12.5

Termux CI workflow (termux-tests.yml)

• Set ANDROID_API_LEVEL=24 for both jobs (required by maturin's Android path)
• Build maturin from source in Full job so it detects native aarch64-linux-android host triple instead of the manylinux-baked aarch64-unknown-linux-gnu
• Pre-install py-sr25519-bindings and cryptography with --no-build-isolation to use the correctly-built maturin
• Increase Full job timeout 20→40 min to accommodate source build

---

📍 Connect Copilot coding agent with Jira, Azure Boards or Linear to delegate work to Copilot in one click without leaving your project management tool.