chore(deps): bump @zkp2p/sdk to 0.13.0

[ADWilkinson]

Summary

• absorb the stable @zkp2p/sdk 0.13.0
• replace the matching 0.12.2-rc.4 dependency and lock entry with the promoted stable release
• leave unrelated dependency updates from bun outdated --latest out of this focused absorption PR

Breaking-change review

The package already consumed the exact 0.12.2-rc.4 code promoted as 0.13.0; no call-site migration is required.

Verification

• bun run ci
• git diff --check

[ADWilkinson]

Ship receipt — merged to main as 913e2ab.

• Review: Codex clean; published SDK declarations remain compatible. Code-taste, deslop, refactor, and visual gates were not applicable to the package-manifest and generated-lockfile-only diff.
• Verification: bun install --frozen-lockfile, bun run typecheck, 338/338 tests, and git diff --check passed locally; required GitHub ci passed.
• Review state: no comments, unresolved threads, or CHANGES_REQUESTED; PR body and commit copy scans were clean.
• Dependency audit: bun outdated --latest completed; unrelated updates remain intentionally held to the focused SDK absorption scope.