Switch to truAPI (retire the triangle-js-sdks host transport)

Summary

Switch the Host API transport off triangle-js-sdks (the @novasamatech/host-api / host-papp stack) and onto truAPI (@parity/truapi).

Background

The Host to product transport layer used to be provided by triangle-js-sdks, which publishes @novasamatech/host-api and @novasamatech/host-papp. That transport is being retired in favour of @parity/truapi. Newer @parity/product-sdk releases route the host transport through @parity/truapi instead.

This CLI reaches the old transport through @parity/product-sdk-terminal@^0.5.0, which still pulls in the @novasamatech/host-papp chain. There are also two local pnpm patches on @novasamatech/statement-store and @novasamatech/sdk-statement.

What needs to happen

• Bump @parity/product-sdk-terminal to a release backed by truAPI (latest is 0.6.2) and bump the rest of the product-sdk stack in lockstep.
• Re-evaluate the two local patches (@novasamatech/statement-store, @novasamatech/sdk-statement) once the transport moves; drop any that are fixed upstream and re-pin any that are still needed against the new versions.
• Confirm @parity/truapi resolves to a single instance in the tree.
• Verify the SSO handshake and statement-store pairing (topic and SessionId derivation) still work end to end after the switch.

Acceptance criteria

• playground init and an SSO pairing complete against the host through truAPI.
• No direct @novasamatech/host-* transport dependency remains other than any strictly test-only transitive use.
• The e2e suite passes.

Start with the dependency manifests and pnpm patches for @novasamatech/statement-store and @novasamatech/sdk-statement. Update the product-sdk stack to a truAPI-backed release, then run the e2e suite and verify playground init, SSO pairing, and statement-store topic and SessionId behavior. Done means no direct host-* transport dependency remains beyond any test-only transitive use.