chore: upgrade evo-sdk to 4.0.0-rc.1 and fix example-app CI

.github/workflows/deploy-example-apps.yml

@@ -70,7 +70,7 @@ jobs:
 
       - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
-          node-version: 20
+          node-version: 24
           cache: npm
           cache-dependency-path: example-apps/${{ matrix.app }}/package-lock.json
 
@@ -95,7 +95,7 @@ jobs:
           VITE_BASE_PATH: /${{ github.event.repository.name }}/${{ matrix.app }}/
 
       - name: Upload built dist
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: site-${{ matrix.app }}
           path: example-apps/${{ matrix.app }}/dist
@@ -113,10 +113,10 @@ jobs:
 
       - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
-          node-version: 20
+          node-version: 24
 
       - name: Download all built apps
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           pattern: site-*
           path: artifacts

CLAUDE.md

@@ -72,6 +72,8 @@ The central helper (~500 lines) that all tutorials import. It handles:
 `keyManager.identityId` resolves automatically from the mnemonic. `keyManager.getAuth()` returns the identity, key, and signer needed for signing transactions.
 
 > **Note:** The in-memory key pattern in `setupDashClient` is for tutorials only — not suitable for production.
+>
+> **Transitional scaffolding:** `setupDashClient-core.mjs` is expected to be removed once the SDK provides key management directly. Its declarations (`setupDashClient-core.d.mts`) deliberately type the `sdk` factory params as `unknown` rather than `EvoSDK` so example apps can pass their own SDK shape without a lockstep type change. Don't tighten it — it breaks the dashnote / dashnote-starter builds.
 
 ### Test Framework