cdk: Refresh mint quote snapshots after signing-key resolution to prevent optimistic-lock conflicts during single and batch minting ([thesimplekid]).
cdk: Migrate legacy npubcash signing keys only for provenance-confirmed quotes while preserving external keys and existing quote metadata ([thesimplekid]).