fix(prod): critical fixes — numpy pin, pyotp, router prefixes

- Pin numpy to 1.26.4 (2.x breaks pandas/bottleneck/numexpr)
- Add pyotp>=2.9.0 (2FA endpoints returned 503)
- Fix scanner/token/wallet routers missing /api/v1/ prefix
These three bugs caused 90%% of API routes to return 404/503 in prod.

app/api/v1/public/scanner.py

@@ -11,7 +11,7 @@ from typing import Any
 from fastapi import APIRouter, HTTPException, Query
 from pydantic import BaseModel
 
-router = APIRouter(prefix="/scanner", tags=["scanner"])
+router = APIRouter(prefix="/api/v1/scanner", tags=["scanner"])
 
 
 class ScanRequest(BaseModel):

app/api/v1/public/token.py

@@ -10,7 +10,7 @@ from typing import Any
 from fastapi import APIRouter, HTTPException, Query
 from pydantic import BaseModel
 
-router = APIRouter(prefix="/token", tags=["token"])
+router = APIRouter(prefix="/api/v1/token", tags=["token"])
 
 
 class TokenSummary(BaseModel):

app/api/v1/public/wallet.py

@@ -10,7 +10,7 @@ from typing import Any
 from fastapi import APIRouter, HTTPException, Query
 from pydantic import BaseModel
 
-router = APIRouter(prefix="/wallet", tags=["wallet"])
+router = APIRouter(prefix="/api/v1/wallet", tags=["wallet"])
 
 
 class WalletResolveResponse(BaseModel):

requirements.txt

@@ -84,7 +84,7 @@ multidict==6.7.1
 narwhals==2.23.0
 neo4j==6.2.0
 networkx==3.6.1
-numpy==2.4.6
+numpy==1.26.4
 packaging==26.2
 pandas==3.0.3
 parsimonious==0.10.0
@@ -174,3 +174,4 @@ wrapt==2.2.2
 x25519==0.0.2
 yarl==1.24.2
 aiofiles>=24.1.0
+pyotp>=2.9.0