fix: enable rc74 proposal replacement in qa fixtures

[ovitrif]

Refs:

• chore: update paykit to rc56 bitkit-android#1365
• fix: allow safe payment request retries bitkit-android#1370
• feat: share paykit state across apps bitkit-android#1401
• fix: restore failed payment requests bitkit-ios#826
• feat: share paykit state across apps bitkit-ios#856

Description

• Adds same-request-ID resend, receiver forget/relink and reviewed-ID acceptance controls to the payment request fixture. Pins rc74 and the required Pubky 0.15 homeserver, and adds bounded link progress checks to prepare setup before an app run.
• The tests of chore: update paykit to rc56 bitkit-android#1365 at 90a91f4 (item J1: partial) ran against this change at 50e0a29.
• The tests of fix: allow safe payment request retries bitkit-android#1370 at f0a73ef (item J1: passed, J2: passed) ran against this change at 8b8314e.
• The tests of fix: restore failed payment requests bitkit-ios#826 at a29b5c7 (item 1: failed, J1: failed, J2: failed) ran against this change at 8b8314e.
• The tests of fix: restore failed payment requests bitkit-ios#826 at 75cea81 (item J1: failed, J2: passed) ran against this change at 8b8314e.
• The tests of feat: share paykit state across apps bitkit-ios#856 at 4c7f705 (item J5: passed) ran against this change at 8b8314e.
• The tests of feat: share paykit state across apps bitkit-android#1401 at deac999 (item J5: failed, J6: passed) ran against this change at 8b8314e.
• The tests of feat: share paykit state across apps bitkit-android#1401 at d44d5bb (item J8: passed, J12: incomplete, J13: incomplete) ran against this change at 8b8314e.
• Checked: Locked release images built; local Rust tests and clippy passed, as did two exact-rc74 SDK checks. Final-image one-time and monthly smoke kept the same request ID and terms, changed stream IDs from 1 to 2, refused obsolete acceptance and accepted the current proposal. Both health probes answered and the image reported SDK 03d4f05. Controller missing-input validation passed. No Bitkit app or device ran; positive imported-app control and device proof remain for the lane install. The private project was removed.

Out of Scope

• Item 2 needs an app-side received-request DTO injector: native received proposal stream IDs are derived by the SDK and cannot be omitted by an issuer.
• Positive control of an imported app identity and all device proof are left to the run on its lane.
• Marketplace purchasing and the unchanged rc65 Paykit Server were not built or exercised.

[ovi-reviewer]

No test run used this; synonymdev/bitkit-ios#921, which it was built for, merged on 13 Oct; synonymdev/bitkit-android#1365, which it was built for, merged on 29 Sep; synonymdev/bitkit-android#1370, which it was built for, merged on 30 Sep; synonymdev/bitkit-ios#826, which it was built for, merged on 1 Oct; synonymdev/bitkit-ios#856, which it was built for, merged on 7 Oct; synonymdev/bitkit-android#1401, which it was built for, merged on 7 Oct before a test run installed it.

Closed as unused. Reopen it when a test needs this change.