[real-value/contracts] add pilot proof command

[FlowmemoryAI]

Summary

Closes #133.

• Adds the root npm run flowchain:real-value-pilot:contracts proof command.
• Tightens DeployBridgeSpine for local Anvil 31337, Base Sepolia 84532, and capped Base 8453; Base 8453 dry runs require FLOWCHAIN_BASE8453_PILOT_ACK=true and nonzero total caps.
• Extends contract tests for bridge credit/withdrawal object vocabulary, partial release/replay behavior, and release zero-parameter checks.
• Documents owner/release-authority assumptions, cap/pause/replay behavior, deployed-address handling, and source-verification commands without committing live addresses or secrets.
• Refreshes the real-value pilot HQ matrix after PR [real-value/bridge] add pilot proof command #145 so the contracts proof is branch-local here and the only remaining strict final-gate blocker is runtime [real-value/runtime] Add pilot runtime proof command #134.

Commands run

• forge test --match-path tests/bridge/BaseBridgeLockbox.t.sol - passed, 17 tests.
• forge test --match-path tests/FlowChainSettlementSpine.t.sol - passed, 8 tests.
• npm run flowchain:real-value-pilot:contracts - passed; focused tests, contracts:hardening, local Anvil dry run, Base 8453 missing-ack rejection, Base 8453 acknowledged dry run, and documentation evidence checks passed.
• npm run flowchain:real-value-pilot:e2e -- -AllowIncomplete - passed as an incomplete coordination report; only runtime [real-value/runtime] Add pilot runtime proof command #134 remained missing.
• npm run flowchain:real-value-pilot:e2e - failed clearly as expected; only runtime [real-value/runtime] Add pilot runtime proof command #134 remained missing.
• node infra/scripts/check-unsafe-claims.mjs - passed.
• git diff --check - passed with line-ending warnings only.
• npm run flowchain:product-e2e - passed.
• npm run flowchain:l1-e2e - passed.

Current blockers

• Strict npm run flowchain:real-value-pilot:e2e remains blocked by runtime [real-value/runtime] Add pilot runtime proof command #134 until the chain-runtime proof command lands.
• This PR does not broadcast any Base transaction and does not submit source verification. The deployment path is dry-run by default; live use requires owner-supplied local env values and explicit capped-pilot acknowledgement.

Scope boundary

This remains a capped owner pilot proof. It does not claim public readiness, production bridge custody, tokenomics, broad deposit availability, or release transaction broadcasting.