Cardano Updates

The overview described push and pull only as update timing. Add a subsection on who publishes and what a pull oracle's signature does and does not guarantee (integrity yes, liveness and freshness no), tying it to the existing freshness warning and multi-oracle reconciliation. Mirror the integrity-vs-liveness note on the Pyth page.

The matrix bench ran each cluster directly in cellDir, which lives under
  the published benchmarks/ output. Node working state (etcd WAL segments,
  cardano-node db, logs) was therefore published, and since the docs deploy
  uses clean:false it accumulated on gh-pages until the branch exceeded the
  GitHub Pages 10GB limit, breaking every deployment.

  Run each matrix cell in a throwaway temp dir so only dataset.json and the
  aggregated scenarios.md reach the output. Also strip any etcd/db/logs dirs
  in the publish workflow as a safety net before deploying.

Signed-off-by: Sasha Bogicevic <[email protected]>

Fixes #2296

- [x] Allow specifying _everyone_ in the same config and declaring "me
myself" somewhere.
- [x] Handle mirror nodes a bit more nicely
- [x] Document the feature
- [x] Changelog

---------

Signed-off-by: Sasha Bogicevic <[email protected]>
Co-authored-by: Sasha Bogicevic <[email protected]>

  loadKnownVersions previously used `error` to handle a malformed
  networks.json at runtime. Since the file is embedded at compile time,
  a parse failure is a programming error that should fail the build, not
  crash a running node.

  The splice reads and parses the file during compilation; a bad JSON
  structure or invalid script hash is now a `fail` in the Q monad,
  surfacing as a GHC error. At runtime the list is a fully-evaluated
  literal with no partial functions on the hot path.

  The parsing and TH expression builder helpers live in
  VersionRegistry.Internal so the splice in VersionRegistry can import
  them as a pre-compiled module, satisfying GHC's staging restriction.

Signed-off-by: Sasha Bogicevic <[email protected]>

feat: track operational cert sequence numbers

Add Cardano.Configuration.Render.nodeConfigurationToJSON, which renders a
resolved NodeConfiguration as a JSON Value using the documented configuration
keys (reusing each component's Maybe-form ToJSON via Identity -> Maybe lifts),
with the CLI-only operational arguments grouped under a Runtime key. The
executable now emits this as YAML instead of the Haskell-record Show output,
which used field/constructor names unfamiliar to non-Haskell users.

Drops the pretty-show dependency in favour of yaml (already a library dep).

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

Render the resolved NodeConfiguration with pretty-show's ppShow (indented,
one field per line) instead of a single-line Show, which was unreadable.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

A small tool that loads a configuration (per-component defaults, the file and
its optional Custom override, and the CLI flags), resolves it exactly as the
node does, and prints the complete resolved NodeConfiguration. It accepts the
same flags as the node, with --config selecting the file.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

Types reachable from a resolved NodeConfiguration (and the file form) were
defined and exported by their component modules but not re-exported from
Cardano.Configuration, so consumers could not pattern-match on them:
ConsensusMode, SnapshotPolicy, SnapshotOptions, LedgerDbBackendSelector,
AcceptedConnectionsLimit and TracingConfiguration.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

The Custom key takes a whole-configuration object — inline or a path to a
JSON/YAML file — and deep-merges it on top of every other file layer, so a
user can keep a shared base configuration and override just a few specific
options. CLI arguments still take precedence.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

The proof is complete, so the three historical "deferred/WIP/does-not-typecheck"
status notes are replaced by one accurate note describing the module parameters
(discharged downstream) and the four-summand accounting.  Also refreshes the
GOVS-coinFromGovDeposit and G₀/G' comments, the arithmetic-helpers prose, and
removes the now-unused abcd-to-adcb shuffle.  No proof changes (still --safe, EXIT 0).

Co-Authored-By: Claude Opus 4.8 <[email protected]>
Claude-Session: https://claude.ai/code/session_01We2YdXX2ozJAdAbCrRwi6r