Cardano Updates

Signed-off-by: Damien <[email protected]>

Merged with the existing one

Signed-off-by: Damien <[email protected]>

Add hf_to_dijkstra function to upgrade to Dijkstra PV12. Rename era
parameter to cmdgroup in create_and_submit_hf_action to reflect that
it accepts a CLI command group. Auto-enable experimental protocols
based on cardano-node version and target protocol version.

feat(makefile): improve Python project automation and add help

Seven fixes from a code review of the script, none of which had
fired in observed CI runs but each of which would surface in a
plausible scenario:

  1. CSS injection idempotency. The previous unconditional
     's|</head>|<style>...</style></head>|' substitution accumulated
     duplicate <style> blocks on every re-run. Add a
     data-dead-link='1' sentinel attribute and gate the substitution
     on /data-dead-link/! so already-injected files are skipped.

  2. Phase 3 grep tolerates no-match. With set -e + pipefail,
     'grep ... | sort -u > FILE' aborted the script when the corpus
     contained no absolute https URLs. Append '|| true' to keep the
     pipeline non-fatal — url_count is checked separately afterwards.

  3. shopt -s nullglob. Empty-glob expansions previously left the
     literal '*/' as the loop variable, which would have inserted '*'
     into SHORT_DIRS / LOCAL_SET. Doesn't trigger on cardano-api but
     the one-line shopt is cheap insurance.

  4. add_unclickable_cmd escapes its title argument against sed
     replacement specials (& \) and the | delimiter. Current callers
     pass package-name-derived strings that can't contain those, but
     defensive escaping protects future callers from breaking the
     emitted sed script.

  5. Explicit error on CHaP fetch failure. Replace the bare
     'curl -sL ... | tar -tz | ...' pipeline with --fail and a
     wrapped if-check, plus a non-empty assertion afterwards, so an
     IOG outage produces a clear error rather than masquerading as
     'everything is non-CHaP'.

  6. Clamp reexport_unresolvable. The previous calculation
     'total - rewritten' could go negative if Python emitted
     duplicate (local_page, anchor, name) rows. Clamp to >= 0.

  7. Pkg extraction tolerates DOC_SUBDIRS in the URL. For
     non-Hackage dead URLs, strip any /api/ /protocols/ /framework/
     segment before extracting the package, so a path like
     .../<pkg>/api/Module.html now yields <pkg> instead of 'api'.

Verified locally: full script runs to exit 0, CSS injection idempotent
under repeated invocation.

Antithesis's image puller rejects `name:tag@sha256:digest` with
"Invalid image name: cannot be empty or contain invalid character"
(verified via run https://github.com/cardano-foundation/cardano-node-antithesis/actions/runs/24998978617).

Switch to canonical OCI digest-only form `name@sha256:digest`. Identical
content guarantee, accepted by Antithesis.

Update push-cardano_node_master_images.sh to skip entries that have no
tag after sanitization — digest-only pins refer to images that already
exist in the registry by definition; there is nothing to rebuild.

Signed-off-by: Damien <[email protected]>

Signed-off-by: Chris Gianelloni <[email protected]>

See https://github.com/agda/agda/issues/8532

Bumps [webiny/action-conventional-commits](https://github.com/webiny/action-conventional-commits) from 1.3.1 to 1.4.2.
- [Release notes](https://github.com/webiny/action-conventional-commits/releases)
- [Commits](https://github.com/webiny/action-conventional-commits/compare/v1.3.1...v1.4.2)

---
updated-dependencies:
- dependency-name: webiny/action-conventional-commits
  dependency-version: 1.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps [github.com/blinklabs-io/gouroboros](https://github.com/blinklabs-io/gouroboros) from 0.153.1 to 0.165.3.
- [Release notes](https://github.com/blinklabs-io/gouroboros/releases)
- [Changelog](https://github.com/blinklabs-io/gouroboros/blob/main/RELEASE_NOTES.md)
- [Commits](https://github.com/blinklabs-io/gouroboros/compare/v0.153.1...v0.165.3)

---
updated-dependencies:
- dependency-name: github.com/blinklabs-io/gouroboros
  dependency-version: 0.165.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Sourced from pragma-org/amaru@d44d84cd9c7a, path docker/testnet.
Authored upstream by Arnaud Bailly. Pin SHA recorded in
testnets/cardano_amaru/.amaru-sha for traceability.

Stack provides 5 cardano-node BPs (10.5.3) in a ring + 2 amaru nodes
bootstrapped from a synthesised chain DB. Reuses existing
cardano-foundation/cardano-node-antithesis sidecar and tracer-sidecar
images.

Vendored as-is; not yet wired into publish-images, justfile, or
Antithesis dispatch — separate follow-up commits.

Refs #72