Cardano Updates

Adjust Dijkstra UTXOW rule to subtransactions

Markdownlint auto-fix resolved formatting issues across 15 files.
Manual fixes: 6 broken anchor links in CONTRIBUTING.md.
YAML fix: indent alignment in build.yml coveralls step.
CRLF to LF: DCO.md, MAINTAINERS.md, SECURITY.md.

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>
Signed-off-by: Yurii Shynbuiev <[email protected]>

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>
Signed-off-by: Yurii Shynbuiev <[email protected]>

- .github/workflows/file-hygiene.yml: caller for reusable lint workflow
- .editorconfig, .gitattributes: canonical file hygiene configs
- .markdownlint.yml, .markdownlint-cli2.yaml: markdownlint config
  (ignores CHANGELOG.md, .build/, Pods/, DerivedData/)
- .yamllint.yml: yamllint config with relaxations
- .shellcheckrc: suppress SC2034 (unused variable in build script)

Refs: hyperledger-identus/hyperledger-identus#172

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>
Signed-off-by: Yurii Shynbuiev <[email protected]>

The `set-git-rev` tool uses `Data.FileEmbed.injectWith` to patch binary
content in Haskell executables, embedding the git revision hash. On
aarch64-darwin (Apple Silicon), this binary patching invalidates the
ad-hoc code signature that the linker originally created.

Apple Silicon requires all executables to have valid code signatures.
Without re-signing, the patched binary will be killed immediately on
launch with a code signature validation error.

The fix re-signs the patched executables with an ad-hoc signature using
`/usr/bin/codesign -f -s -` after `set-git-rev` has finished patching.
This is a no-op on non-darwin platforms via `lib.optionalString`.

Copyright: Moritz Angermann <[email protected]>, Input Output Group.

On aarch64-darwin (Apple Silicon), all executables must have valid code
signatures. The set-git-rev tool uses Data.FileEmbed.injectWith to
binary-patch a dummySpace placeholder in the executable with the actual
git revision hash. This modifies the Mach-O binary content, invalidating
the ad-hoc code signature that the linker created.

The wrapper derivation created by applyPatches uses
phases="unpackPhase patchPhase installPhase" (no fixupPhase), so
nixpkgs' autoSignDarwinBinariesHook never runs. This results in
executables like db-analyser being unusable on Apple Silicon.

Re-sign all binaries with ad-hoc signatures after set-git-rev runs.

- Removed obsolete scripts: `create-wallets.ts`, `run-route-chain.ts`, `inspect-context.ts`, `run-pending-transactions-smoke.ts`, `sign-transaction-preprod.ts`, and `template-route-step.ts`.
- Introduced new CLI structure under `scripts/ci/cli/` with `bootstrap.ts` and `route-chain.ts` for improved organization.
- Updated `docker-compose.ci.yml` to reflect changes in script execution.
- Revised documentation in `README.md` to align with new script structure and clarify CI stages.
- Adjusted scenario descriptions in `manifest.ts` to reference new script locations.

NFT Print Lab (NFTPrintLab.io) is shutting down. Remove all related
source code, e2e tests, translations, analytics events, feature flags,
and environment variables.

- Derive Mithril and chain-storage tokens from each runtime theme.

- Derive weight combined download progress by actual transfer sizes.

- Refresh selector styles and add missing font and spinner imports.