improve signed reads, crypto hardening, and scraper transport

app/api/performance.py

@@ -8,7 +8,8 @@ from sqlalchemy.ext.asyncio import AsyncSession
 from app.database import get_db
 from app.models import BotTrade
 from app.schemas import BotPerformance
-from app.services.signed_request import verify_signed_request_any
+from app.services.signed_request import (
+    SignedReadCreds, signed_read_creds, verify_signed_request_any)
 
 router = APIRouter()
 logger = logging.getLogger(__name__)
@@ -21,8 +22,7 @@ ACTION_VIEW_USER = "view_user"
 @router.get("/performance", response_model=BotPerformance)
 async def get_performance(
     wallet: str = Query(..., description="Wallet address (lower-cased internally)"),
-    ts: int = Query(..., description="Signed timestamp (ms)"),
-    sig: str = Query(..., description="EIP-191 signature"),
+    creds: SignedReadCreds = Depends(signed_read_creds),
     include_paper: bool = Query(
         False,
         description="Include paper (simulated) trades. Default false — this "
@@ -35,8 +35,8 @@ async def get_performance(
     verify_signed_request_any(
         actions=[ACTION_VIEW_PERFORMANCE, ACTION_VIEW_USER],
         wallet=wallet,
-        timestamp_ms=ts,
-        signature=sig,
+        timestamp_ms=creds.ts,
+        signature=creds.sig,
         body=None,
         allow_replay=True,
     )