Cardano Updates

chore: add notary category and remove STAMPD

docs workflow fixes

- Add prop_wrongPassphrase: verify the tool exits with failure when
  given a wrong passphrase (Shelley/PBKDF2 scheme)
- Vary Scrypt hash length in Byron test (32, 64, 128 bytes), matching
  the coverage in the secrets library tests

Missing 53 new builtins: expModInteger, dropList, array ops (lengthOfArray,
listToArray, indexArray), BLS multi-scalar-mul, insertCoin, lookupCoin,
unionValue, valueContains, valueData, unValueData, scaleValue.

Replace homegrown lowercase-ASCII-only passphrase generator with the
comprehensive genUserPassphrase from Cardano.Wallet.Primitive.Passphrase.Gen
which generates full printable ASCII with proper min/max length bounds.

tasty-golden has a built-in --no-create flag that causes tests to fail
(rather than silently auto-create) when a golden file is missing.  This
makes it impossible for a test to pass in CI when its golden file was
accidentally omitted from the repository.

Changes:
* nix/project.nix: add testFlags = ["--no-create"] for every test
  component that uses tasty-golden (23 suites identified by running each
  suite with --help and checking for the flag in the output).
* .github/workflows/nightly-testsuite.yml: pass --no-create to the two
  nightly nix run invocations (plutus-core-test, plutus-ir-test).
* plutus-ledger-api: update costModelParamNames golden file, which was
  found to be stale (missing 23 new builtins) when running the test
  suite under --no-create during development of this fix.

- Fix copyright year to 2026
- Rename passText to passphrase
- Vary Shelley mnemonic sizes (15, 24 words)
- Add optional second-factor mnemonic for Shelley
- Vary Byron mnemonic sizes (12, 15 words)

Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 3 to 4.
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest-build-provenance/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 7 to 8.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v7...v8)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

Extracted sop packages to https://github.com/input-output-hk/sop-extras

Cleanup README and contributing