chore(deps): drop abandoned mock-browser to remove form-data@2.3.3

mock-browser (last published 2022) pulled an ancient chain
mock-browser -> jsdom@9.12.0 -> request@2.88.2 -> form-data@2.3.3, the source
of the form-data unsafe-random-boundary alert (GHSA-fjxv-7rqg-78g4) that the
~2.3.2 range could not relock past.

- Removed the unused mock-browser devDependency from e2e and wallet.
- Replaced its single real use in dapp-connector's injectGlobal test with a
  minimal inline window stub (injectGlobal only touches window.cardano; the
  test only reads window.location.hostname) and dropped the module .d.ts shim.

Result: mock-browser, jsdom@9, request and form-data@2.3.3 are all removed;
the only remaining form-data is the patched 4.0.6. dapp-connector tests
green (44/44); full build green.

Resolves #1703.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: rhyslbw

packages/dapp-connector/package.json

@@ -43,7 +43,6 @@
     "jest-environment-jsdom": "^28.1.3",
     "jest-webextension-mock": "^3.7.19",
     "madge": "^5.0.1",
-    "mock-browser": "^0.92.14",
     "npm-run-all": "^4.1.5",
     "ts-jest": "^28.0.7",
     "tsc-alias": "^1.8.10",

packages/dapp-connector/test/index.d.ts

@@ -3,13 +3,19 @@ import { Cip30Wallet } from '../src/WalletApi';
 import { RemoteAuthenticator, WindowMaybeWithCardano, injectGlobal } from '../src';
 import { api, properties, stubAuthenticator } from './testWallet';
 import { dummyLogger as logger } from 'ts-log';
-import { mocks } from 'mock-browser';
+
+// Minimal window stub: injectGlobal only touches `window.cardano`, and the tests
+// only read `window.location.hostname`. Typed loosely (as the previous mock-browser
+// window was) so the assertions can read `window.cardano[...]` directly.
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+const createWindow = (): any => ({ location: { hostname: 'localhost' } });
 
 describe('injectGlobal', () => {
-  let window: ReturnType<typeof mocks.MockBrowser>;
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  let window: any;
 
   beforeEach(() => {
-    window = mocks.MockBrowser.createWindow();
+    window = createWindow();
   });
 
   it('creates the cardano scope when not exists, and injects the wallet public API into it', async () => {

packages/dapp-connector/test/injectGlobal.test.ts

@@ -160,7 +160,6 @@
     "jest-webextension-mock": "^3.7.22",
     "json-bigint": "^1.0.0",
     "madge": "^5.0.1",
-    "mock-browser": "^0.92.14",
     "npm-run-all": "^4.1.5",
     "null-loader": "^4.0.1",
     "readable-stream": "^3.6.0",

packages/e2e/package.json

@@ -54,7 +54,6 @@
     "jest": "^28.1.3",
     "jest-webextension-mock": "^3.7.19",
     "madge": "^5.0.1",
-    "mock-browser": "^0.92.14",
     "npm-run-all": "^4.1.5",
     "ts-jest": "^28.0.7",
     "tsc-alias": "^1.8.10",