Fix ETF flows, remove Voyages, and remediate dependencies

[chapati23]

Summary

• replace the timing-out ETF scraper with bounded, date-aware DefiLlama parsing for BTC, ETH, and SOL
• remove OpenSea Voyages plus its AgentMail, Puppeteer, and Terraform wiring
• upgrade and patch the dependency graph until Bun audit and OSV report zero findings, with no suppressions
• integrate current upstream main and preserve its Daily Degen removal, Congress Trades, and workflow changes
• pin Bun consistently in CI and Docker and document dependency maintenance and destructive rollback

Verification

• 514 tests pass with coverage
• typecheck, Knip, and full Trunk pass
• Bun audit: zero vulnerabilities
• OSV: zero findings with the ignore configuration deleted
• Terraform init/fmt/validate pass
• production Docker image builds with patched dependencies applied
• live DefiLlama fetch returns BTC/ETH/SOL flows
• deterministic and fresh-context semantic reviews are clean
• both inline review findings fixed, replied to, and resolved
• upstream Quality Checks pass

Known unrelated CI issue

The upstream claude-review workflow fails before code review because it lacks id-token: write and therefore has no ACTIONS_ID_TOKEN_REQUEST_URL. This is unrelated to this branch; a separate CI-fix branch already addresses it.

Ship Checklist

• ship skill used
• local review and structured closeout review run
• full validation run
• upstream merge conflicts resolved without force-pushing
• review threads replied to and resolved

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 3fa62976d5

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".