chore: harden market contract guardrails

[tvolk131]

Summary

• make the Simplex CLI, workspace graph, and Nix CLI lock checks exact across versions and crates.io source identities
• opt the runtime compiler into only the SimplicityHL Imports unstable feature
• add deterministic binary-market ABI and nonuniform-asset CMR fixtures
• enforce canonical/minimal budget padding across CompactSize boundaries
• report typed Simplicity bounds and enforce reviewed contract/transaction resource ceilings

Why

This establishes the safety baseline for the upcoming compiler/execution and SimplicityHL contract refactors. It makes dependency drift, ABI changes, asset byte-order mistakes, noncanonical padding, and material resource regressions fail before we refresh any pre-launch contract vectors.

No market-contract semantics or existing canonical CMR/script/control-block vectors change in this PR.

Validation

• nix develop .#default --command just verify-smplx
• nix develop .#default --command cargo test --locked -p deadcat-contracts --test golden_vectors
• nix develop .#default --command cargo test --locked -p deadcat-client --test simplicity_budget
• nix develop .#default --command just clippy
• nix develop .#default --command cargo nextest run --locked --workspace --status-level fail --final-status-level fail (186 passed, 4 skipped)
• nix develop .#default --command cargo test --locked --workspace --doc
• nix develop .#default --command just wasm-check
• nix flake check

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}