chore: Use SHA-256 utility

[FrederikBolding]

Use sha256 utility from metamask/utils which has the same implementation.

---

Note

Switch hashing to @metamask/utils sha256 in signing and verification, removing fallback logic/tests and bumping the utils dependency.

• Crypto/Verification:
  • Replace custom/@noble/hashes SHA-256 with sha256 from @metamask/utils in src/verify.ts and scripts/sign-registry.ts.
  • Remove internal sha256 helper and noble imports; adjust signing to hash file bytes before secp256k1.sign.
• Tests:
  • Delete fallback digest tests; retain signature validity tests in src/verify.test.ts.
• Dependencies:
  • Bump @metamask/utils to ^11.9.0.
  • Remove @noble/hashes from dependencies and update lockfile.

^{Written by Cursor Bugbot for commit 19c4a7d. This will update automatically on new commits. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​metamask/​utils@​11.4.0 ⏵ 11.9.0			+1	-4

View full report

[FrederikBolding]

I have verified locally that this produces the same signature as the previous implementation

[cryptodev-2s]

LGTM!