Cardano Updates

Bumps  and [minimatch](https://github.com/isaacs/minimatch). These dependencies needed to be updated together.

Updates `minimatch` from 9.0.5 to 9.0.9
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v9.0.5...v9.0.9)

Updates `minimatch` from 3.1.2 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v9.0.5...v9.0.9)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 9.0.9
  dependency-type: indirect
- dependency-name: minimatch
  dependency-version: 3.1.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

  - extract verify result parsing into a dedicated module and improve theorem-level status attribution
  - harden verification artifact handling (safe cleanup boundaries, process-tree termination, pinned
  blaster revision)
  - extend verify CLI behavior (env forwarding, project-root out-dir resolution, doctor/clean directory
  args, JSON/text output helpers)
  - refactor export-tests command execution and add tests for env forwarding and output modes
  - add validator-handler codegen support, fuzz constraint extraction fixes, and broader CI regression
  jobs

Bumps [rollup](https://github.com/rollup/rollup) from 4.27.4 to 4.59.0.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rollup/rollup/compare/v4.27.4...v4.59.0)

---
updated-dependencies:
- dependency-name: rollup
  dependency-version: 4.59.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps  and [minimatch](https://github.com/isaacs/minimatch). These dependencies needed to be updated together.

Updates `minimatch` from 9.0.5 to 9.0.7
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v9.0.5...v9.0.7)

Updates `minimatch` from 3.1.2 to 3.1.4
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v9.0.5...v9.0.7)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 9.0.7
  dependency-type: indirect
- dependency-name: minimatch
  dependency-version: 3.1.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

  fix several soundness and compatibility regressions in verify flows.

Fix 1: Source map path bug (lib.rs:798)

  Problem: validator.title can contain slashes from nested module paths (e.g.
  governance/voting.my_vote.spend). When used directly as a filename in
  dir.join(), the slash creates nested subdirectories. Since only dir was
  created with create_dir_all, the intermediate directories don't exist and
  fs::write fails.

  Fix: Replace / with - in the validator title before constructing the
  filename:
  let safe_title = validator.title.replace('/', "-");
  let filename = format!("{}.sourcemap.json", safe_title);

  This produces flat filenames like
  governance-voting.my_vote.spend.sourcemap.json.

  Fix 2: Coverage property test iterations (lib.rs:615-670)

  Problem: property_max_success was ignored (prefixed with _) and property
  tests were only sampled once during coverage, missing code paths that only
  get exercised with different fuzzer inputs.

  Fix:
  - Renamed _property_max_success back to property_max_success and threaded it
   through to collect_tests_for_coverage
  - Replaced the single-sample logic with a loop that chains the PRNG state
  across property_max_success iterations, generating a separate test program
  for each sampled value
  - Each iteration's coverage gets merged into the aggregate, giving proper
  coverage reporting across all fuzzer inputs

Bumps [ajv](https://github.com/ajv-validator/ajv) from 6.12.6 to 6.14.0.
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](https://github.com/ajv-validator/ajv/compare/v6.12.6...v6.14.0)

---
updated-dependencies:
- dependency-name: ajv
  dependency-version: 6.14.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>