keep wallet verification small

Server-side Solana signature checks do not need the full web3 stack. Decode the address to public-key bytes, encode the signed message, and verify the detached signature with a narrow ed25519 library.