adopt @scure/bip39

[dynst]

Half of #1721

@scure/bip39 2.0 is an ESM package with dependencies, and Yarn 4's import loader hooks are compatible with node 22+, not node 20, so there's an error in the node 20 CI. Same trouble as at #1804

node:internal/modules/esm/resolve:873
  throw new ERR_MODULE_NOT_FOUND(packageName, fileURLToPath(base), null);
        ^

Error [ERR_MODULE_NOT_FOUND]: Cannot find package '@noble/hashes' imported from /home/runner/work/cosmjs/cosmjs/.yarn/cache/@scure-bip39-npm-2.0.1-715af0e367-ed8a0788bc.zip/node_modules/@scure/bip39/index.js
    at packageResolve (node:internal/modules/esm/resolve:873:9)
    at moduleResolve (node:internal/modules/esm/resolve:946:18)
    at defaultResolve (node:internal/modules/esm/resolve:1188:11)
    at ModuleLoader.defaultResolve (node:internal/modules/esm/loader:708:12)
    at #cachedDefaultResolve (node:internal/modules/esm/loader:657:25)
    at ModuleLoader.getModuleJobForRequire (node:internal/modules/esm/loader:413:53)
    at new ModuleJobSync (node:internal/modules/esm/module_job:375:34)
    at ModuleLoader.importSyncForRequire (node:internal/modules/esm/loader:386:11)
    at loadESMFromCJS (node:internal/modules/cjs/loader:1363:24)
    at Module._compile (node:internal/modules/cjs/loader:1503:5) {
  code: 'ERR_MODULE_NOT_FOUND'
}

Node.js v20.19.5

[webmaster128]

Looks good

[webmaster128]

Can we make the error test tests more specific here? "invalid" could be anything

[dynst]

In testing, the full error message here wasn't actually any more specific, so in a literal sense we can't. It's just two words, 'Invalid mnemonic'. Which could mean anything.

https://github.com/paulmillr/scure-bip39/blob/1.6.0/src/index.ts#L52

[webmaster128]

LGTM. Is there anything left before merging this?

[dynst]

Good to merge!