fix: restore TON + Tron USD on dashboard

[BitHighlander]

Summary

Dashboard / Asset / Send pages showed `$0.00` USD for TON and Tron even with correct balance quantities (e.g. `15.7018 TON`). Vault's own UI showed proper USD (`$20.30` for the same 15 TON), so it wasn't a Pioneer data gap — it was an auth mismatch on our side.

Root cause

Pioneer's `/charts/portfolio` silently omits TON and Tron entries when called without a `?key=key:public-*` query param. EVM / UTXO / Cosmos / tokens come back unauthenticated, which made the omission non-obvious. Our previous workaround was per-address `/ton/accountInfo` + `/tron/accountInfo` calls, which return raw balance but no price — exactly what we saw on the dashboard.

Solana's `/portfolio` path already used the same key-based auth, which is why Solana USD always worked.

Fix

• `chartsPortfolioUrl` now appends `?key=key:public-${Date.now()}`.
• TON and Tron pubkeys flow through the main `fetchBatch` — dropped the dedicated `fetchTonBatch` / `fetchTronBatch` helpers (≈90 lines). Three concurrent batches → two.
• Added per-entry log for TON / Tron rows coming back from Pioneer so future triage can see `price=1.37 value=20.14`.

Included bonus fixes

• Icon flicker (`Failed to set icon './icon-128-online.png': Failed to fetch`): MV3 service-worker cold-start race. `updateIcon` now dedupes no-op calls (checkKeepKey fires every 5s, 99% are redundant) and retries once after 500ms on error.
• Log-strip pass in `injected.ts` + `content/index.ts` (console.* noise removal, no behavior change).

Test plan

• `make build` — 9 workspaces green.
• Live: curl `/charts/portfolio?key=…` returns TON `priceUsd: 1.37, valueUsd: 20.14`.
• Dashboard: TON row shows `~$20`, TRX row shows price > 0.
• Icon no longer flickers on cold start.
• Verify on a wallet with non-zero Tron balance (Pioneer may filter 0-balance Tron at the portfolio level).

🤖 Generated with Claude Code

[BitHighlander]

Both concerns addressed in `183b68d`.

#1 Partial-portfolio regression. Re-introduced the per-address fallback but as a targeted patch, not the old parallel batch. Flow:

1. Send everything through authenticated `/charts/portfolio` (happy path, prices + values).
2. Diff the response against the TON/TRON pubkeys we asked about — match by (lowercased networkId, lowercased pubkey/address).
3. For any pubkey the portfolio silently dropped, fire `/api/v1/{ton,tron}/accountInfo` and push a priceless fallback row flagged with `_fallback: true`.

Degraded state is "TON row shows quantity, `$0.00` USD" instead of "TON row disappears". Price re-enters as soon as Pioneer's portfolio call covers that pubkey again on the next cycle.

#2 Stale-icon retry. Scrapped `setIconWithRetry(capturedPath)`. New flow:

• `updateIcon()` derives the path from CURRENT `KEEPKEY_STATE` every call.
• On error, it clears the dedupe key and reschedules `updateIcon()` itself — not the stale captured path.
• An `iconRetryPending` guard prevents runaway retries when the API stays unhappy; the next legitimate state change overrides it.

So if state flips to disconnected during the 500ms backoff, the retry reads the new state and paints the offline icon instead of replaying a stale online icon.

Residual risk on regression coverage — still no e2e spec for either path, agreed. Happy to add one if the e2e suite grows TON/Tron fixtures; otherwise leave as a follow-up.