feat(multx): gate paused v0.5 testnet redeployments

[BrewCodeDev]

Outcome

Adds a fail-closed, manifest-driven procedure for deploying new paused MultX v0.5 bridge contracts to Kamet and Makalu. This does not execute a deployment and does not alter historical contracts.

Safety gates

• exact immutable v0.5 tag, commit, and compiled runtime SHA-256;
• exact chain ID and Hardhat network;
• seven unique public signer addresses with a fixed 5-of-7 threshold;
• signer separation from deployer, governance owner, and pause guardian;
• distinct deployer/governance/guardian roles;
• token code and symbol verification against live RPC;
• explicit positive per-token daily caps;
• no-signature preflight by default;
• execution key accepted only from a protected local file;
• exact manifest hash and approval-record acknowledgement;
• explicit UTC window start/end, enforced before the key is read or a transaction is signed;
• pause before enabling tokens, then verified paused state after ownership transfer;
• sanitized transaction and bytecode evidence written only after verification.

The example includes LAX only and leaves every authority/cap/approval as a failing placeholder. Other assets require separate route/cap approval.

Validation

• 84 Hardhat tests pass after review hardening.
• Contract compilation passes.
• Candidate runtime SHA-256 reproduced exactly: 6bfdb3d2c8e7ae5f26169ac8c1b982c86eded4dda74a1940cbb3e88093b11cfc.
• Live no-transaction preflight previously passed on Kamet chain 900523 and Makalu chain 700777.
• No transaction was signed or submitted.
• npm audit --omit=dev reports zero production findings. The full deployment/test toolchain audit reports 63 transitive development findings (3 critical, 14 high); keep execution isolated and complete dependency modernization before treating this toolchain as a long-lived production runner.

External gate

Execution remains blocked on seven client-controlled public signer addresses/operators, governance roles, exact UTC window, rollback/responders, caps, approval record, dependency-toolchain disposition, and explicit activation authority. MultX remains disabled on LITHO mainnet.

[github-actions]

Test Results

Package	Passed	Failed	Skipped	Total	Duration
api	no results
indexer	no results
explorer	no results

Coverage

Package	Stmts %	Branch %	Funcs %	Lines %
api	no coverage
indexer	no coverage
explorer	no coverage

_{Generated by ci.yaml for b783d5855565c5ac74b07567e9c28351a2250e45. Test JSON + coverage HTML are uploaded as run artifacts.}