sgbett bsv-ruby-sdk

• CVE-2026-40070 High 8.1 bsv-sdk and bsv-wallet persist unverified certifier signatures in acquire_certificate (direct and issuance paths) 0.1%
• CVE-2026-40069 High 7.5 bsv-sdk ARC broadcaster treats INVALID/MALFORMED/ORPHAN responses as successful broadcasts 0.3%