[real-value/bridge] Add pilot bridge proof command

[FlowmemoryAI]

Objective

Add the dedicated bridge relayer proof command required by the final real-value pilot gate:

npm run flowchain:real-value-pilot:bridge

Acceptance Criteria

• Command exists at the repo root and can run without live RPC in mock mode.
• Base 8453 observer mode verifies eth_chainId == 0x2105, rejects wrong chains, rejects unapproved lockboxes, and enforces confirmation-depth configuration.
• Writes deterministic observation, credit, pilot evidence, withdrawal intent, and release evidence files.
• Duplicate Base event replay is rejected or idempotent with explicit evidence and no second local credit application.
• Scripts print exact next operator commands and keep committed fixtures/logs/exports free of secrets.
• Records exact commands, reports, blockers, allowed folders, and forbidden folders in the PR.

Out Of Scope

• Production bridge custody or public bridge readiness claims.

[FlowmemoryAI]

HQ refresh after PR #132 merged to main:

• Local worktree inspected: E:\FlowMemory\flowmemory-live-bridge on agent/real-value-pilot-bridge.
• Branch checklist reports the bridge proof complete: Base 8453 pilot observer mode, chain-id rejection, approved lockbox guard, confirmation-depth config, deterministic observation/credit/evidence files, duplicate replay evidence, local credit once, withdrawal/release evidence path, next operator commands, no-secret boundary, bridge tests, mock pilot E2E, wrong-chain negatives, bridge local-credit smoke, and product E2E.
• Branch services/bridge-relayer/package.json has pilot:e2e, but the root flowchain:real-value-pilot:bridge command expected by the merged HQ gate is still missing.
• No PR currently exists for agent/real-value-pilot-bridge.
• Main still has no dedicated npm run flowchain:real-value-pilot:bridge, so the strict HQ gate still fails on this proof row.

Next integration action: rebase/freshen the bridge branch onto main commit 14f378b, add the root proof command delegating to the bridge pilot E2E, rerun bridge tests, mock pilot E2E, wrong-chain negatives, npm run bridge:local-credit:smoke, product E2E, and strict HQ gate checks, then open a PR.

[FlowmemoryAI]

HQ recheck after PR #141 on the bridge branch:

• Worktree: E:\FlowMemory\flowmemory-live-bridge
• Branch: agent/real-value-pilot-bridge
• Current branch is still behind current main; it needs a rebase/reconciliation with the HQ umbrella gate.
• Branch-local service proof exists: services/bridge-relayer script pilot:e2e.
• Root package currently has flowchain:real-value-pilot:e2e, but not the required dedicated flowchain:real-value-pilot:bridge command expected by the merged HQ gate.

Fresh commands run from that worktree:

npm run pilot:e2e --prefix services/bridge-relayer
node infra/scripts/check-unsafe-claims.mjs
git diff --check

Results:

• npm run pilot:e2e --prefix services/bridge-relayer passed in mock-pilot mode.
• It checked first local credit application, same-event replay, duplicate deposit replay rejection, wrong-chain negative, and unapproved-contract negative paths.
• Report path: services/bridge-relayer/out/real-value-pilot-e2e/bridge-real-value-pilot-e2e-report.json.
• node infra/scripts/check-unsafe-claims.mjs passed.
• git diff --check passed with Windows line-ending warnings only.

Next action: rebase this branch onto current main, preserve the service proof, add root flowchain:real-value-pilot:bridge delegating to the service pilot E2E, rerun bridge tests/local-credit/product evidence, then open a PR linked to #138.