fix(makalu): require explicit Quantt contract settings

[bachal-mb]

Outcome

• keep Quantt fail-closed unless auth scheme and insights path are explicitly approved
• reject credential-bearing or query/hash-bearing base URLs
• record live status, healthy research portal, the exact dev.quantt.at certificate mismatch, and owner inputs
• do not substitute the unapproved quantts.ai lookalike

Verification

• 5 focused Quantt tests passed
• all 164 API tests passed; 9 live-integration tests intentionally skipped
• strict TypeScript build passed
• git diff --check passed

Deployment behavior

The production Quantt configuration is currently absent, so this release remains configured:false. No credential, API-domain substitution, faucet change, or external mutation is included.

[github-actions]

Test Results

Package	Passed	Failed	Skipped	Total	Duration
api	173	0	0	173	-1786732198.1s
indexer	no results
explorer	no results

Coverage

Package	Stmts %	Branch %	Funcs %	Lines %
api	56.98	61.61	77.22	56.98
indexer	no coverage
explorer	no coverage

_{Generated by ci.yaml for c92c92d2dafc06d455a6ca7b2128fa55bf0e07f0. Test JSON + coverage HTML are uploaded as run artifacts.}