Import private keys and wallets + replace toolchain with stagex

[oliviathet]

Summary & Motivation (Problem vs. Solution)

• Supports importing wallets and private keys via 3 steps (init import to generate encryption key in secure enclave, encrypt plaintext seed phrase, import ciphertext to secure enclave)
• Bumps Go 1.19 to 1.21
• Replaces Toolchain with Stagex for deterministic Go builds because Toolchain doesn't support Go 1.21

Wallet Import Flow:

# Init import (online)
turnkey wallets init-import \
--user <user_id> \
--import-bundle-output "./import_bundle.txt" \
--key-name demo 

# Encrypt without saving plaintext to filesystem (offline)
turnkey encrypt \
--import-bundle-input "./import_bundle.txt" \
--encrypted-bundle-output "./encrypted_bundle.txt" \
--plaintext-input /dev/fd/3 3<<<"$SEEDPHRASE_1"

# Import (online)
turnkey wallets import \
--user <user_id> \
--name "demo wallet" \
--encrypted-bundle-input "./encrypted_bundle.txt" \
--key-name demo 

Private Key Import Flow:

# Init import (online)
turnkey private-keys init-import \
--user <user_id> \
--import-bundle-output "./import_bundle.txt" \
--key-name demo 

# Encrypt without saving plaintext to filesystem (offline)
turnkey encrypt \
--import-bundle-input "./import_bundle.txt" \
--encrypted-bundle-output "./encrypted_bundle.txt" \
--plaintext-input /dev/fd/3 3<<<"$RAW_KEY_1"

# Import (online)
turnkey private-keys import \
--user <user_id> --name "demo wallet"  \
--encrypted-bundle-input "./encrypted_bundle.txt" \
--address-format ADDRESS_FORMAT_ETHEREUM \
--curve CURVE_SECP256K1 \
--key-name demo 

Release Steps

See README for additional details.

• Tag the release (once approved)
• Attest (once merged)
• Create release with changelog
• Update Homebrew tap

[Ulexus]

some small things, but looks good to me

[Ulexus]

gosimplify: just instantiate with the return: plaintextBytes, err := hex.Decode...?

[Ulexus]

For things like this in a common namespace, it would be safer to additionally namespaces the package-scoped variable here. Perhaps something like user -> walletInitImportUser?

[Ulexus]

While these two commands should never be executed on the same run, it feels dangerous to reuse the variables like this

[timurnkey]

LFG!!!! 🚀