Cardano Updates

`haskell-nix-cabal-project-local-sync` was previously included in
the shell's `nativeBuildInputs` and shellHook only when the
project's effective `cabalProjectLocal` had non-empty content.
For targets where none of the platform mkIfs fire and the user
hasn't set anything (e.g. ghcjs), the script was missing from
PATH — so any test that called it directly errored with
`command not found`, and the test's `import:
cabal.project.<targetPrefix>local` then failed because the file
didn't exist either.

Always include the script and always run the shellHook.  When
the project's `cabalProjectLocal` is empty, the script writes an
empty `cabal.project.<targetPrefix>local`, which cabal imports
harmlessly (no-op).  Removes the empty-content gate, so the
shape is the same across all targets.

Verified the ghcjs cabal-sublib-shell test now passes
(`aarch64-darwin.unstable.ghc9141.ghcjs.tests.cabal-sublib-shell.run`)
and the existing native/musl64/wasi32 paths are unchanged.

Real `armv7a-unknown-linux-androideabi-ghc-9.14.1` reports:

  ,("Target platform","armv7-unknown-linux")
  ,("target arch","ArchARM ARMv7 [VFPv3,NEON] SOFTFP")
  ,("target platform string","armv7-unknown-linux")

while dummy-ghc was emitting `armv7a-unknown-linux` / `ArchAArch32`,
diverging the dummy and real `--info` outputs and failing
`x86_64-linux.unstable.ghc9141.armv7a-android-prebuilt.tests.dummy-ghc-info`.

Two normalisations:

* `platformString`: map `cpu.name == "armv7a"` → `armv7`, mirroring
  the existing `i686 → i386` map.

* `target arch`: emit `ArchARM ARMv7 [VFPv3,NEON] SOFTFP` for
  `cpu.name == "armv7a"`, before the generic `isAarch32 →
  ArchAArch32` fallback.

Verified that the dummy-ghc-info test passes on
`armv7a-android-prebuilt` and is unchanged on aarch64-multiplatform,
aarch64-multiplatform-musl, aarch64-android-prebuilt, musl64,
ucrt64, and wasi32.

Bumps [andrewslotin/go-proxy-pull-action](https://github.com/andrewslotin/go-proxy-pull-action) from 1.4.0 to 1.5.0.
- [Release notes](https://github.com/andrewslotin/go-proxy-pull-action/releases)
- [Commits](https://github.com/andrewslotin/go-proxy-pull-action/compare/e5aea3b8b3478fc5b76befda4390513868ed2dc8...00af8a5a49c844d6dde0bbbc116b72d8fd7ae97c)

---
updated-dependencies:
- dependency-name: andrewslotin/go-proxy-pull-action
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Takes a Hydra eval ID (e.g. 1542) or full URL, curls the eval
page's `?full=1` view, extracts the failing `x86_64-linux.*`
job names from the `Still Failing` / `Newly Failing` tab panes,
and runs `nix build` for each with `--builders ''` so they
exercise the build locally instead of being dispatched to a
remote builder.

Useful for iterating on PR CI runs without waiting for hydra
slot scheduling.

Bumps [andrewslotin/go-proxy-pull-action](https://github.com/andrewslotin/go-proxy-pull-action) from 1.4.0 to 1.5.0.
- [Release notes](https://github.com/andrewslotin/go-proxy-pull-action/releases)
- [Commits](https://github.com/andrewslotin/go-proxy-pull-action/compare/e5aea3b8b3478fc5b76befda4390513868ed2dc8...00af8a5a49c844d6dde0bbbc116b72d8fd7ae97c)

---
updated-dependencies:
- dependency-name: andrewslotin/go-proxy-pull-action
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps [github.com/blinklabs-io/plutigo](https://github.com/blinklabs-io/plutigo) from 0.1.11 to 0.1.13.
- [Release notes](https://github.com/blinklabs-io/plutigo/releases)
- [Changelog](https://github.com/blinklabs-io/plutigo/blob/main/RELEASE_NOTES.md)
- [Commits](https://github.com/blinklabs-io/plutigo/compare/v0.1.11...v0.1.13)

---
updated-dependencies:
- dependency-name: github.com/blinklabs-io/plutigo
  dependency-version: 0.1.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps [github.com/blinklabs-io/gouroboros](https://github.com/blinklabs-io/gouroboros) from 0.168.0 to 0.170.1.
- [Release notes](https://github.com/blinklabs-io/gouroboros/releases)
- [Changelog](https://github.com/blinklabs-io/gouroboros/blob/main/RELEASE_NOTES.md)
- [Commits](https://github.com/blinklabs-io/gouroboros/compare/v0.168.0...v0.170.1)

---
updated-dependencies:
- dependency-name: github.com/blinklabs-io/gouroboros
  dependency-version: 0.170.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps [github.com/btcsuite/btcd/btcutil](https://github.com/btcsuite/btcd) from 1.1.6 to 1.2.0.
- [Release notes](https://github.com/btcsuite/btcd/releases)
- [Changelog](https://github.com/btcsuite/btcd/blob/master/CHANGES)
- [Commits](https://github.com/btcsuite/btcd/compare/btcutil/v1.1.6...btcutil/v1.2.0)

---
updated-dependencies:
- dependency-name: github.com/btcsuite/btcd/btcutil
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps the actions-deps group with 4 updates: [step-security/harden-runner](https://github.com/step-security/harden-runner), [github/codeql-action](https://github.com/github/codeql-action), [coursier/cache-action](https://github.com/coursier/cache-action) and [scalacenter/sbt-dependency-submission](https://github.com/scalacenter/sbt-dependency-submission).


Updates `step-security/harden-runner` from 2.19.1 to 2.19.3
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](https://github.com/step-security/harden-runner/compare/a5ad31d6a139d249332a2605b85202e8c0b78450...ab7a9404c0f3da075243ca237b5fac12c98deaa5)

Updates `github/codeql-action` from 4.35.4 to 4.35.5
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/68bde559dea0fdcac2102bfdf6230c5f70eb485e...9e0d7b8d25671d64c341c19c0152d693099fb5ba)

Updates `coursier/cache-action` from 8.1.0 to 8.1.1
- [Release notes](https://github.com/coursier/cache-action/releases)
- [Commits](https://github.com/coursier/cache-action/compare/90c37294538be80a558fd665531fcdc2b467b475...95e5b1029b6b86e7bac033ee44a0697d8a527d2d)

Updates `scalacenter/sbt-dependency-submission` from 3.2.1 to 3.2.2
- [Release notes](https://github.com/scalacenter/sbt-dependency-submission/releases)
- [Commits](https://github.com/scalacenter/sbt-dependency-submission/compare/f43202114d7522a4b233e052f82c2eea8d658134...1cc96a7038ea2b014c200c1dae3a0cc92293b91d)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.19.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: github/codeql-action
  dependency-version: 4.35.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: coursier/cache-action
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: scalacenter/sbt-dependency-submission
  dependency-version: 3.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
...

Signed-off-by: dependabot[bot] <[email protected]>

Re-submission after the v1 mint (policy 98c61f40…, PR #7962) was retired
due to an off-chain ceremony bug that locked the surrender pool. v2 mint
(policy 7ff33a55…) is live on mainnet at tx 86966bda… block 13436249, and
the pool's spendability has been verified on chain via a dual-admin
self-rotate at block 13436306.

Token details:
- Policy ID: 7ff33a5565393dc47b48ac47becc12d92c9952e724e8446dfb6adc66
- Asset name: cMATRA (6 decimals, 1B total supply)
- Subject:    7ff33a5565393dc47b48ac47becc12d92c9952e724e8446dfb6adc66634d41545241
- Ticker:     cMATRA
- URL:        https://fluxpointstudios.com

Every attested property is dual-signed by the two admin keys that control
the mint and surrender-pool contracts on chain (admin_1 + admin_2,
visible in the .json signatures arrays).