v0.16.0 — libid-contracts 0.17.0, one deployer per environment

Takes libid-contracts 0.17.0: the factory's genesis admin is a parameter, so each network file names its deployer ([accounts].deployer) and every canonical address follows from that key.

• Testnet deployer alias/libid-testnet-deployer (libid-testnet AWS account), address 0xdaeb247f5a90c53f2d7a80a81f6cb6acb0d8b907; eden-testnet and Sepolia carry its table (factory 0x9dbf2b5f96cb31a48cca4e25d2c8348be414ebc8, IdentityRegistry 0x25f29c8c765db2f27d1e2b23987a7b0655c7d640) and the libid-testnet notary 0x569ae51d9c356f838c2811389a932b681cb6491c.
• Apply refuses a signer that is not the deployer, on every chain; --dev and the factory-owner impersonation are gone.
• plan --print-addresses reads the file before validation, so a new network's table can be filled in from it.