Cardano Updates

`TransactionLedgerSpec.buildLegacyParityTx` no longer references
`toCardanoLovelace` or `toCardanoStakeCredential` after the unsigned
builder migration moved its withdrawal and fee inputs onto ledger
types. Drop the two unused imports so the full-unit GitHub Actions
build (which sets `-Werror=unused-imports`) is green.

Tasks: T010, T011, T012, T013

Move the unsigned Shelley transaction body builder onto ledger types so
`mkUnsignedTx` no longer routes through `Cardano.createTransactionBody`
or `Cardano.TxBodyContent`.

The shared ledger builder now lives in a new acyclic sibling module
`Cardano.Wallet.Shelley.Transaction.Unsigned`. Both
`Cardano.Wallet.Shelley.Transaction` and
`Cardano.Wallet.Shelley.Transaction.Ledger` import it without
re-introducing the legacy cycle that `Transaction.Ledger -> Transaction`
required for `signTransaction`/`txConstraints`. `mkUnsignedTx` takes
ledger `[TxCert era]` and `Withdrawal` directly, constructs the body
with `buildLedgerTxRaw`/`mkLedgerTx`, and extracts the `Cardano.TxBody`
shape from the ledger tx so existing signing call sites keep their API
surface untouched (signing rewrite remains scoped to #5289).

`Cardano.Wallet.Transaction.Delegation` and
`Cardano.Wallet.Transaction.Voting` are deleted; their last call sites
use the ledger-native helpers
`certificateFromDelegationActionLedger` /
`certificateFromVotingActionLedger` exported by
`Transaction.Unsigned`, and the cabal `exposed-modules` block is
updated accordingly. Dijkstra remains unsupported exactly as today, and
no files under `lib/integration/**` are touched.

Tasks: T010, T011, T012, T013

Adds the acyclic-builder plan, task list, and tmux worker brief for the serial #5285 implementation slice.

Records the #5285 scope, no-integration-test policy, and acceptance criteria before implementation.

Adds the local branch gate for #5285 and enforces the remaining-epic policy that this PR cannot modify lib/integration/**.

## Resolves

- #5288 — script-witness support in `Transaction.Ledger`.
- Parent: #5243 (transaction-layer cardano-api removal).
- Blocks: #5285.

## Status

Ready for review.

Implementation commit: `3cb6e7ae9bd954a47a23bcadd4f40cb11e0fa541`.
Finalization commit: `309f58bb9ff589135cd85a558e937d96c07965d5`.
CI warning fix: `8c717bf2a8a6139381533fa0772516c6934a5d2d`.

## Delivered Scope

`Cardano.Wallet.Shelley.Transaction.Ledger` now accepts the
script-witness surface currently consumed by legacy `mkUnsignedTx`:

- `swNativeInputs :: Map TxIn (Script KeyHash)` — native spending
witnesses.
- `swStakingScript :: Maybe (Script KeyHash)` — staking-credential
script for withdrawals and certificates.
- `swMintingSources :: Map AssetId ScriptSource` — local mint scripts
and reference-input mint policies.
- `swReferenceScript :: Maybe (Script KeyHash)` — output-attached
reference script.

The default `noScriptWitnesses` preserves the existing production call
sites in `mkTransaction` and `constructUnsignedTxLedger`. `mkUnsignedTx`
and `mkUnsignedTransaction` are intentionally unchanged; their migration
remains #5285.

The new builder mirrors the legacy body/witness shape, including
reference-input minting and the legacy one-witness-per-token-policy
merge for local mint scripts.

## Tests

Added `Cardano.Wallet.Shelley.TransactionLedgerSpec` coverage for:

- six enumerated Conway parity scenarios: native input script, staking
script, local mint, reference-input mint, output reference script, and
mixed witnesses,
- `prop_buildLedgerTx_matches_mkUnsignedTx_on_script_witnesses` with 100
QuickCheck cases,
- body-CBOR equality and `witsTxL . scriptTxWitsL` equality between
legacy and ledger-native builders.

## Local Verification

Fresh local gate at implementation HEAD
`3cb6e7ae9bd954a47a23bcadd4f40cb11e0fa541` before the final `gate.sh`
removal commit:

```text
./gate.sh
Cardano.Wallet.Shelley.TransactionLedger: 27 examples, 0 failures
prop_buildLedgerTx_matches_mkUnsignedTx_on_script_witnesses: OK, passed 100 tests
HLint: No hints
exit 0
```

The exact earlier failing property seed was also rerun before the full
gate:

```text
--seed 1404754578
1 example, 0 failures
OK, passed 100 tests
```

CI-warning repair at `8c717bf2a8a6139381533fa0772516c6934a5d2d` was
verified locally with the same Nix surfaces as the failed GitHub job:

```text
git diff --check
exit 0

nix build --quiet .#unit-cardano-wallet-unit
exit 0

nix build --quiet .#cardano-wallet .#cardano-node .#cardano-cli .#local-cluster .#integration-exe .#test-local-cluster-exe .#unit-cardano-wallet-unit .#unit-cardano-numeric .#unit-cardano-wallet-primitive .#unit-cardano-wallet-secrets .#unit-cardano-wallet-test-utils .#unit-cardano-wallet-launcher .#unit-cardano-wallet-network-layer .#unit-cardano-wallet-application-tls .#unit-cardano-wallet-blackbox-benchmarks .#unit-delta-chain .#unit-delta-store .#unit-delta-table .#unit-delta-types .#unit-std-gen-seed .#unit-wai-middleware-logging .#unit-benchmark-history .#wallet-key-export .#wallet-key-export-test
exit 0
```

Finalization audit at `309f58bb9ff589135cd85a558e937d96c07965d5`:

```text
OK: every commit passes the message gate; tasks.md is complete.
git show --check HEAD: clean
```

No files under `lib/integration/**` are touched by this branch.

## Non-goals

- No migration of `mkUnsignedTransaction` itself (#5285).
- No new Dijkstra-era behaviour (#5209).
- No changes under `lib/integration/**`.
- No removal of the `cardano-api` build-dep (#5290).
- No changes to transaction signing (#5289).

## Live-boundary Check

The live-boundary diagnostic returns "none" for this slice: the parity
proof compares CBOR bytes of two pure builders over hand-rolled
selections; no node/database/API boundary is in the picture (see
`plan.md` "Live-boundary check").

Remove redundant Conway-only test-helper constraints in TransactionLedgerSpec so the full unit derivation compiles under CI warning settings.

No behavior change.

- Move the subagent brief out of tasks.md into
  specs/008-script-witness-parity/briefs/T010-T013.md so the
  task list stays scannable. tasks.md now points at the brief
  rather than embedding it.
- Add T013 (US3): one QuickCheck property
  prop_buildLedgerTx_matches_mkUnsignedTx_on_script_witnesses
  over random (SelectionOf TxOut, ScriptWitnesses) pairs within
  documented generator bounds. The property is acceptance-gating;
  withMaxSuccess 100; same equality assertions as the six
  enumerated cases.
- Revise research.md D6 (property was "optional"; now mandatory)
  and plan.md "Tests" (was "optional/deferred"; now mandatory)
  so all artifacts agree.

Document the parity contract between the legacy `mkUnsignedTx`
(cardano-api builder) and the extended `Transaction.Ledger`
builder for native-script inputs, staking script, mint/burn
script sources, and output reference scripts. Byte-equivalence
on six representative scenarios is the acceptance criterion;
non-script behaviour and `ledgerMintPlumbingSpec` invariants
from #5287 remain green. `mkUnsignedTransaction` itself is
explicitly out of scope (tracked by #5285), as are signing
(#5289), Dijkstra-era extensions (#5209), and cardano-api
dependency removal (#5290).

This is the ephemeral mechanical gate that every subagent and
review pass must run before the PR is marked ready. It is removed
in a final `chore: drop gate.sh` commit at finalization.

Tasks: T000

Stacked follow-up for issue #5285, based on
[#5287](https://github.com/cardano-foundation/cardano-wallet/pull/5287)
/ branch `007-ledger-minting`.

## What changed

This PR now contains one narrow API-removal source slice:

- `Cardano.Wallet.buildAndSignTransaction` uses
`Cardano.Wallet.Shelley.Transaction.Ledger.mkTransaction`.
- The obsolete `Cardano.Wallet.Shelley.Transaction.mkTransaction`
cardano-api wrapper was removed.
- The ledger constructor was renamed from `mkTransactionLedger` to
`mkTransaction` now that it owns the production signed path.
- The #5285 and #5287 spec artifacts were aligned with the real state:
mint plumbing is present; script-witness parity remains the blocker for
the unsigned body-builder migration and cert-helper deletion.

## Still out of scope

- `mkUnsignedTransaction` still uses the cardano-api body builder.
- `Transaction/Voting.hs` and `Transaction/Delegation.hs` are not
deleted yet, because their remaining caller still needs the full
unsigned body-builder migration first.
- Script-witness support remains the next blocker.

## Local verification

- `rg -n "mkTransactionLedger" . -S` -> no matches
- `rg -n "\\bmkTransaction\\b"
lib/wallet/src/Cardano/Wallet/Shelley/Transaction.hs -S` -> no matches
- `fourmolu --mode check lib/wallet/src/Cardano/Wallet.hs
lib/wallet/src/Cardano/Wallet/Shelley/Transaction.hs
lib/wallet/src/Cardano/Wallet/Shelley/Transaction/Ledger.hs` -> pass
- `hlint lib/wallet/src/Cardano/Wallet.hs
lib/wallet/src/Cardano/Wallet/Shelley/Transaction.hs
lib/wallet/src/Cardano/Wallet/Shelley/Transaction/Ledger.hs` -> `No
hints`
- `git diff --check` -> pass
- `nix build
.#legacyPackages.x86_64-linux.hsPkgs.cardano-wallet.components.library
--no-link` -> exit 0

Refs: #5285, #5243, #5237, #5287.

## Summary

Implements the smallest first slice toward unblocking
[#5285](https://github.com/cardano-foundation/cardano-wallet/issues/5285)
Story 1: the ledger-native transaction builders no longer silently drop
minting.

This PR now includes both the spec artifacts and implementation for
[#5243](https://github.com/cardano-foundation/cardano-wallet/issues/5243):

- adds `toLedgerMintValue :: TokenMap -> TokenMap -> MultiAsset`,
netting wallet mint/burn maps into signed ledger quantities and dropping
zero entries and empty policy buckets
- threads explicit `MultiAsset` mint values through `buildLedgerTx` and
`buildLedgerTxRaw`
- extracts `txAssetsToMint` / `txAssetsToBurn` from `TransactionCtx` for
`mkTransactionLedger`
- extends `constructUnsignedTxLedger` to accept mint/burn maps and
updates the `Cardano.Wallet` call sites
- keeps script-witness support out of scope; that remains the documented
next blocker before non-empty mint transactions can validate on-chain

Follows PR
[#5286](https://github.com/cardano-foundation/cardano-wallet/pull/5286),
which documented why #5285 Story 2 has to land before Story 1.

## Artifacts

- `specs/007-ledger-minting/spec.md` — user stories, requirements,
success criteria, out-of-scope
- `specs/007-ledger-minting/plan.md` — design decisions and
implementation plan
- `specs/007-ledger-minting/research.md` — existing builder/converter
findings
- `specs/007-ledger-minting/data-model.md` — mint/burn netting rules and
invariants
- `specs/007-ledger-minting/contracts/ledger-mint-translation.md` —
converter and builder contracts
- `specs/007-ledger-minting/tasks.md` — planned task breakdown
- `specs/007-ledger-minting/quickstart.md` — reviewer commands

## Verification

- [x] `cabal test cardano-wallet-primitive:test -O0 -v0
--test-show-details=streaming --test-options='--match
toLedgerMintValue'` — 8 examples, 0 failures; each property passed 1000
tests
- [x] `cabal test cardano-wallet-unit:unit -O0 -v0
--test-show-details=streaming --test-options='--match explicit'` — 3
examples, 0 failures
- [x] `fourmolu --mode check` on touched Haskell files
- [x] `git diff --check`
- [x] `rg 'mempty -- TODO: minting support' lib/wallet/src` returns zero
matches
- [x] `rg '^toLedgerMintValue' lib/primitive` returns matches in
`Convert.hs`
- [x] FR-008 guard: `git diff origin/master --
lib/wallet/src/Cardano/Wallet/Shelley/Transaction/Ledger.hs | rg -i
'ScriptSource'` returns zero matches

## Out of Scope

- Script witnesses for mint scripts
- The `mkUnsignedTransaction` migration itself, tracked under #5285
- Dijkstra-era support in `mkLedgerTx`, unchanged from the existing
Conway-only behaviour

Use the ledger-native mkTransaction from Cardano.Wallet.buildAndSignTransaction now that the stacked minting prerequisite preserves mint and burn values there.

Remove the obsolete cardano-api mkTransaction wrapper from Shelley.Transaction and align the specs with the remaining script-witness blocker.

Tasks: #5285

Spec under specs/006-drop-api-shelley-tx/ covering issue #5285:
three independently-shippable vertical stories (P1 cert helpers,
P2 body construction, P3 signTransaction) under parent epic #5237.

Pre-flight grep on the implementation pass showed lib/wallet/src/Cardano/
Wallet.hs already imports certificateFrom{Delegation,Voting}ActionLedger
from Cardano.Wallet.Shelley.Transaction.Ledger and its 4 callsites at
2729, 2738, 3533, 3542 already use the *Ledger variants. The Phase-0
research had it wrong; plan.md, quickstart.md, and tasks.md inherited
the error. Spec.md was correct (line 18 already named the single
caller).

Slice scope shrinks from 'edit two files + delete two + cabal prune' to
'edit Shelley/Transaction.hs + delete two + cabal prune'. SC-001/SC-002,
FR-003, and the byte-equivalence proof are unaffected.

Implementation pre-flight on dce6abbbf1 showed that swapping the cert
callsites in Shelley/Transaction.hs to the *Ledger variants does not
compile: mkUnsignedTransaction passes the cert lists into
constructUnsignedTx (the cardano-api body builder) at line ~834, which
expects [ApiCert.Certificate (CardanoApiEra era)]. The *Ledger builders
return [Ledger.TxCert era]. The two are not interchangeable at this
callsite.

Cardano/Wallet.hs works on *Ledger because it routes through
constructUnsignedTxLedger — a different code path. The original Phase-0
inventory missed which body builder consumed the certs in
Shelley/Transaction.hs.

Net: Story 1 is blocked transitively on Story 2 (the body-construction
migration to constructUnsignedTxLedger), which is itself blocked on the
minting + script-witness AC in #5243. When Story 2 lands, the helper
deletion + cabal prune fold into Story 2's commit; there is no
standalone Story 1 PR. PR #5286 becomes documentation-only.

Files updated:
- spec.md: Story 1 marked BLOCKED on Story 2; assumption section corrected.
- plan.md: Status block reflects all three stories deferred; Vertical
  Slice Contract rewritten so Story 1 folds into Story 2.
- research.md: new §G "Cert flow in Shelley/Transaction.hs — what
  blocks Story 1" with the GHC error and the call-graph analysis.
- data-model.md: Story 1 row corrected to note it is not downstream-
  compatible at the Shelley/Transaction.hs callsites today.
- contracts/module-interface-invariants.md: helper-deletion invariants
  re-pegged to Story 2.
- quickstart.md: stub explaining the deferral and what to do when
  Story 2 unblocks.
- tasks.md: no work tasks; the prior T001-T014 are removed in favour of
  a deferral notice.

Refs: #5285, #5243, #5237

Phase 0 + Phase 1 speckit artifacts for issue #5285.

- plan.md (109 lines): three vertical slices, constitution check clean,
  Story 1 unblocked, Stories 2-3 blocked on Transaction.Ledger
  prerequisite ACs in #5243.
- research.md: full cardano-api symbol inventory in
  Shelley/Transaction.hs (~40 symbols across 4 imports), per-Story
  grouping, ledger replacements located.
- data-model.md: cardano-api -> ledger type map per Story.
- contracts/module-interface-invariants.md: exports that MUST stay
  signature-stable across all three slices.
- quickstart.md: ordered implementation walkthrough for Story 1
  (the unblocked slice; 5 callsites in Shelley/Transaction.hs,
  4 in Cardano/Wallet.hs, plus cabal prune and helper deletion).

Add toLedgerMintValue for wallet mint/burn TokenMaps and feed the signed ledger MultiAsset through mkTransactionLedger, constructUnsignedTxLedger, buildLedgerTx, and buildLedgerTxRaw.

The converter properties cover totality, empty input, mint-only, burn-only, netting, phantom-key absence, empty-bucket absence, and disjoint roundtrip. The builder specs cover buildLedgerTx and both buildLedgerTxRaw input branches.

Verification:

cabal test cardano-wallet-primitive:test -O0 -v0 --test-show-details=streaming --test-options='--match toLedgerMintValue'

cabal test cardano-wallet-unit:unit -O0 -v0 --test-show-details=streaming --test-options='--match explicit'

hlint lib

fourmolu --mode check touched Haskell files

git diff --check

Add toLedgerMintValue for wallet mint/burn TokenMaps and feed the signed ledger MultiAsset through mkTransactionLedger, constructUnsignedTxLedger, buildLedgerTx, and buildLedgerTxRaw.

The converter properties cover totality, empty input, mint-only, burn-only, netting, phantom-key absence, empty-bucket absence, and disjoint roundtrip. The builder specs cover buildLedgerTx and both buildLedgerTxRaw input branches.

Verification:

cabal test cardano-wallet-primitive:test -O0 -v0 --test-show-details=streaming --test-options='--match toLedgerMintValue'

cabal test cardano-wallet-unit:unit -O0 -v0 --test-show-details=streaming --test-options='--match explicit'

fourmolu --mode check touched Haskell files

git diff --check

Implementation pre-flight on dce6abbbf1 showed that swapping the cert
callsites in Shelley/Transaction.hs to the *Ledger variants does not
compile: mkUnsignedTransaction passes the cert lists into
constructUnsignedTx (the cardano-api body builder) at line ~834, which
expects [ApiCert.Certificate (CardanoApiEra era)]. The *Ledger builders
return [Ledger.TxCert era]. The two are not interchangeable at this
callsite.

Cardano/Wallet.hs works on *Ledger because it routes through
constructUnsignedTxLedger — a different code path. The original Phase-0
inventory missed which body builder consumed the certs in
Shelley/Transaction.hs.

Net: Story 1 is blocked transitively on Story 2 (the body-construction
migration to constructUnsignedTxLedger), which is itself blocked on the
minting + script-witness AC in #5243. When Story 2 lands, the helper
deletion + cabal prune fold into Story 2's commit; there is no
standalone Story 1 PR. PR #5286 becomes documentation-only.

Files updated:
- spec.md: Story 1 marked BLOCKED on Story 2; assumption section corrected.
- plan.md: Status block reflects all three stories deferred; Vertical
  Slice Contract rewritten so Story 1 folds into Story 2.
- research.md: new §G "Cert flow in Shelley/Transaction.hs — what
  blocks Story 1" with the GHC error and the call-graph analysis.
- data-model.md: Story 1 row corrected to note it is not downstream-
  compatible at the Shelley/Transaction.hs callsites today.
- contracts/module-interface-invariants.md: helper-deletion invariants
  re-pegged to Story 2.
- quickstart.md: stub explaining the deferral and what to do when
  Story 2 unblocks.
- tasks.md: no work tasks; the prior T001-T014 are removed in favour of
  a deferral notice.

Refs: #5285, #5243, #5237

Spec under specs/006-drop-api-shelley-tx/ covering issue #5285:
three independently-shippable vertical stories (P1 cert helpers,
P2 body construction, P3 signTransaction) under parent epic #5237.