security(deps): add changeset + workspace changelog for asyncapi pin

Add a patch changeset across all six published packages and record the
fix in the root CHANGELOG (2.0.0 -> 2.0.1) so the AsyncAPI supply-chain
hardening ships as a coordinated release via the changesets flow.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: alexander-sei

.changeset/security-pin-asyncapi.md

@@ -0,0 +1,14 @@
+---
+"@sei-js/create-sei": patch
+"@sei-js/ledger": patch
+"@sei-js/mcp-server": patch
+"@sei-js/precompiles": patch
+"@sei-js/registry": patch
+"@sei-js/sei-global-wallet": patch
+---
+
+Harden the workspace against the 2026-07-14 "Miasma RAT" AsyncAPI supply-chain incident by pinning `@asyncapi/*` packages to non-compromised versions via root `pnpm.overrides`.
+
+This stops a fresh install or lockfile regeneration from floating `@asyncapi/specs` up into the compromised `6.11.2` through the `mint` docs toolchain (`mint` → `@asyncapi/parser`). Resolved change: `@asyncapi/specs` `6.10.0` → `6.11.1`; `@asyncapi/generator`, `@asyncapi/generator-helpers`, and `@asyncapi/generator-components` are pinned preventively.
+
+No shipped code or public API changes in this package — this is a repository/CI hardening release.

CHANGELOG.md

@@ -1 +1,15 @@
 # Changelog
+
+## 2.0.1 — 2026-07-22
+
+### Security
+
+- Pin `@asyncapi/*` packages to non-compromised versions via `pnpm.overrides`, in
+  response to the 2026-07-14 "Miasma RAT" AsyncAPI supply-chain incident. Stops a
+  fresh install or lockfile regeneration from floating `@asyncapi/specs` up into the
+  compromised `6.11.2` through the `mint` docs toolchain (`mint` → `@asyncapi/parser`).
+  - Resolved change: `@asyncapi/specs` `6.10.0` → `6.11.1`.
+  - `@asyncapi/generator`, `@asyncapi/generator-helpers`, and `@asyncapi/generator-components`
+    pinned preventively (not currently in the tree).
+  - No published `@sei-js/*` package's code or public API changes. A coordinated
+    patch release across all six packages carries this note for consumer visibility.

package.json

@@ -1,6 +1,6 @@
 {
 	"name": "sei-js",
-	"version": "2.0.0",
+	"version": "2.0.1",
 	"private": true,
 	"license": "MIT",
 	"scripts": {