improve signed reads, crypto hardening, and scraper transport

app/api/trades.py

@@ -9,7 +9,8 @@ from sqlalchemy.ext.asyncio import AsyncSession
 from app.database import get_db
 from app.models import BotTrade, iso_utc
 from app.schemas import BotTrade as BotTradeSchema
-from app.services.signed_request import verify_signed_request_any
+from app.services.signed_request import (
+    SignedReadCreds, signed_read_creds, verify_signed_request_any)
 
 router = APIRouter()
 logger = logging.getLogger(__name__)
@@ -55,8 +56,7 @@ def _trade_to_schema(trade: BotTrade) -> BotTradeSchema:
 @router.get("/trades", response_model=List[BotTradeSchema])
 async def get_trades(
     wallet: str = Query(..., description="Wallet address (lower-cased internally)"),
-    ts: int = Query(..., description="Signed timestamp (ms)"),
-    sig: str = Query(..., description="EIP-191 signature"),
+    creds: SignedReadCreds = Depends(signed_read_creds),
     limit: int = Query(default=20, ge=1, le=500),  # raised from 100: Analytics needs 500 for full history
     page:  int = Query(default=1,  ge=1),
     db: AsyncSession = Depends(get_db),
@@ -65,8 +65,8 @@ async def get_trades(
     verify_signed_request_any(
         actions=[ACTION_VIEW_TRADES, ACTION_VIEW_USER],
         wallet=wallet,
-        timestamp_ms=ts,
-        signature=sig,
+        timestamp_ms=creds.ts,
+        signature=creds.sig,
         body=None,
         allow_replay=True,
     )