Bump web3 from 4.13.0 to 4.16.0

[lmken]

Summary

The hosted-wallet-page project uses web3 4.13.0. The latest is 4.16.0 (minor version bump, low risk).

Affected Package

• moonpay-react-sell-oninitiatedeposit/hosted-wallet-page/package.json — web3: 4.13.0

Acceptance Criteria

• Bump web3 to 4.16.0
• Verify MetaMask wallet signing still works in the hosted wallet page
• No new audit vulnerabilities introduced