Cardano Updates

Diagnostic-only workflow to verify certificate stores on the
Windows runner and confirm the root cause of #5110.

Migrates restoration benchmarks from Buildkite to GitHub Actions.
Only baseline variant enabled for initial testing.

Closes #5127

Signed-off-by: Sasha Bogicevic <[email protected]>

Signed-off-by: Sasha Bogicevic <[email protected]>

Point foliage input at angerman/foliage#fix/retry-backoff-download-concurrency
(input-output-hk/foliage#115) to test the fix for transient HTTP 502
failures under high parallelism (-j 0).

Fix transient HTTP 502 failures when downloading source tarballs from
GitHub under high parallelism (-j 0).

Two changes:

1. Add --retry 3 --retry-connrefused to curl invocations. Curl retries
   transient HTTP errors (408, 429, 500, 502, 503, 504) with built-in
   exponential backoff (1s, 2s, 4s). The existing actionRetry 5 is kept
   as a second layer for non-HTTP failures.

2. Cap concurrent downloads at 20 using Shake's Resource mechanism.
   This prevents hundreds of simultaneous curl processes from
   overwhelming GitHub when running with -j 0. Non-network tasks
   (patching, sdist creation, index building) still run at full
   parallelism.

Rewrite mempool-sim-web core to use:
- Global tx registry with per-tx BitSet bitmaps (1 bit/node)
- Lightweight nodes (counters only, no tx storage)
- Same mini-protocol: OfferTx → RequestTx → SendTx
- Same link delay model (latency + size/bandwidth)
- Same adversary model (intercept, create variant, frontrun delay)
- Endorser block support (--eb flag) with tx cache modes
- 1000 nodes / 18M events in ~9s / 130MB heap

New files: bitmap.ts, tx-registry.ts
Removed: mempool.ts, peer-manager.ts (functionality merged into bitmaps)

This brings in the input-output-hk/foliage#109 bug fix and several other
improvements

This is required for updating the foliage input afterwards

Rewrite mempool-sim-web core to use:
- Global tx registry with per-tx BitSet bitmaps (1 bit/node)
- Lightweight nodes (counters only, no tx storage)
- Same mini-protocol: OfferTx → RequestTx → SendTx
- Same link delay model (latency + size/bandwidth)
- Same adversary model (intercept, create variant, frontrun delay)
- Endorser block support (--eb flag) with tx cache modes
- 1000 nodes / 18M events in ~9s / 130MB heap

New files: bitmap.ts, tx-registry.ts
Removed: mempool.ts, peer-manager.ts (functionality merged into bitmaps)

Bumps [cryptography](https://github.com/pyca/cryptography) from 46.0.3 to 46.0.5.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/46.0.3...46.0.5)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 46.0.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps [cryptography](https://github.com/pyca/cryptography) from 46.0.3 to 46.0.5.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/46.0.3...46.0.5)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 46.0.5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>