Upgrade secp256k1 to >= 4.0.4 to address CVE-2024-48930

[mcmire]

secp256k1 is not a direct dependency of this project; it shows up in the dependency tree via ganache-cli. ganache-cli, and thus secp256k1, are development-only dependencies (they are used only for tests).

ganache-cli has been replaced by ganache. Unfortunately because development of ganache has ended, we cannot upgrade it to a version that uses a higher version of secp256k1. We may have to come up with another way of upgrade secp256k1.

Acceptance Criteria

• package-lock.json should contain no references to secp256k1 < 4.0.4.

References

See security advisory: https://github.com/MetaMask/ethjs-filter/security/dependabot/21