refactor: type binary market covenant actions

[tvolk131]

Summary

• replace the loose binary-market witness fields with authenticated SLOT plus a typed five-operation ACTION sum
• derive path refinements, cancellation/redemption shape, burn quantity, and expiry token side from the slot and mandatory transaction outputs
• centralize coordinator roles, exact input roles, layouts, and raw nested-Either encoding behind checked Rust domain APIs
• decode the five exact branch-pruned finalized ACTION types instead of scanning anonymous widths or searching candidate interpretations
• refresh the source ABI, both parameterized CMRs, all eight Taproot vectors, protocol docs, conformance evidence, and resource ceilings

Why

Market v1 is still undeployed, so this takes the prelaunch breaking change now. The old witness exposed redundant, independently selectable fields (PATH, amounts, redemption side, dummy oracle data) and duplicated path inference across the covenant, builder, and interpreter. The typed semantic action removes those degrees of freedom and makes invalid role/action combinations unrepresentable off chain.

Consensus impact

This intentionally changes the binary-market CMR and all eight scriptPubKeys. The storage version (0x01), eight slot tags, fixed YES coordinator, A/B RT schedule, and SimplicityHL 0.6 toolchain remain unchanged.

Canonical golden CMR:

e8912f8e5deb3c04ba47eaacacc8d194ae0473e35cee9e171b8a71e3513abca0

Verification

• nix develop .#default --command just ci-checks
  • formatting and strict Clippy
  • 211 workspace tests
  • doc tests and WASM check
• nix develop .#default --command just regtest-market-ab
  • 16 transactions confirmed across three production-shaped lifecycle chains
  • malformed proofs and follower-stack coordinator transplant rejected
• all-path/both-RT-side budget corpus and exact decoder conformance tests
• independent consensus review: no outstanding findings

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}