Cardano Updates

Replace fixed attempt counts and epoch-fraction delays with a deadline-based
poll_until! macro and bounded backoff, keeping detection responsive on long epochs.

Publish the dual (Ed25519 + Schnorr) genesis verification key bundle for the ivc-snark-preview environment.

Error instead of fabricating an ephemeral Schnorr signer when bootstrapping a Lagrange genesis with a legacy single-Ed25519 key, which produced an unverifiable Schnorr signature.

The overview described push and pull only as update timing. Add a subsection on who publishes and what a pull oracle's signature does and does not guarantee (integrity yes, liveness and freshness no), tying it to the existing freshness warning and multi-oracle reconciliation. Mirror the integrity-vs-liveness note on the Pyth page.

Signed-off-by: Pat Losoponkul <[email protected]>

The File Hygiene workflow (reusable lint-files.yml from
hyperledger-identus/.github) runs markdownlint-cli2 over **/*.md.
The repo config (.markdownlint-cli2.yaml) ignored only the root
CHANGELOG.md, but per-package CHANGELOGs (packages/**/CHANGELOG.md)
are auto-generated by `nx release` and written without a trailing
newline, violating MD047/single-trailing-newline.

This made the lint / Markdown job fail on every PR after each release
that rewrote the per-package changelogs (e.g. Dependabot PR #661).

Fix: change the ignore from "CHANGELOG.md" to "**/CHANGELOG.md" so all
generated changelogs (root + per-package) are exempt, consistent with
how the root changelog was already handled.

Verified locally: markdownlint-cli2 '**/*.md' -> 0 error(s).

Signed-off-by: Pat Losoponkul <[email protected]>

The matrix bench ran each cluster directly in cellDir, which lives under
  the published benchmarks/ output. Node working state (etcd WAL segments,
  cardano-node db, logs) was therefore published, and since the docs deploy
  uses clean:false it accumulated on gh-pages until the branch exceeded the
  GitHub Pages 10GB limit, breaking every deployment.

  Run each matrix cell in a throwaway temp dir so only dataset.json and the
  aggregated scenarios.md reach the output. Also strip any etcd/db/logs dirs
  in the publish workflow as a safety net before deploying.

Signed-off-by: Sasha Bogicevic <[email protected]>

Fixes #2296

- [x] Allow specifying _everyone_ in the same config and declaring "me
myself" somewhere.
- [x] Handle mirror nodes a bit more nicely
- [x] Document the feature
- [x] Changelog

---------

Signed-off-by: Sasha Bogicevic <[email protected]>
Co-authored-by: Sasha Bogicevic <[email protected]>

  loadKnownVersions previously used `error` to handle a malformed
  networks.json at runtime. Since the file is embedded at compile time,
  a parse failure is a programming error that should fail the build, not
  crash a running node.

  The splice reads and parses the file during compilation; a bad JSON
  structure or invalid script hash is now a `fail` in the Q monad,
  surfacing as a GHC error. At runtime the list is a fully-evaluated
  literal with no partial functions on the hot path.

  The parsing and TH expression builder helpers live in
  VersionRegistry.Internal so the splice in VersionRegistry can import
  them as a pre-compiled module, satisfying GHC's staging restriction.

Signed-off-by: Sasha Bogicevic <[email protected]>

nix: .all builds all packages

feat: track operational cert sequence numbers

Add Cardano.Configuration.Render.nodeConfigurationToJSON, which renders a
resolved NodeConfiguration as a JSON Value using the documented configuration
keys (reusing each component's Maybe-form ToJSON via Identity -> Maybe lifts),
with the CLI-only operational arguments grouped under a Runtime key. The
executable now emits this as YAML instead of the Haskell-record Show output,
which used field/constructor names unfamiliar to non-Haskell users.

Drops the pretty-show dependency in favour of yaml (already a library dep).

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>