cli: verify MulticastPublisherBlock in resource verify

[elitegreg]

Summary of Changes

• Extend doublezero resource verify to cover the MulticastPublisherBlock resource extension, the global IP block from which multicast publisher users allocate their dz_ip. Previously only 7 of 10 ResourceType variants were verified; publishers' dz_ip allocations were invisible to the tool.
• Check in both directions: every publisher user's in-range dz_ip must be allocated in the extension, and every allocation must have a matching user. Discrepancies flow through the existing insert_usage / check_discrepancies helpers and are auto-fixable via --fix.
• Ignore legacy publishers whose dz_ip was allocated before this extension existed and falls outside the block's range (e.g. prior to MulticastPublisherBlock). Without this guard, those would be reported as UsedButNotAllocated and --fix would then fail because allocate_specific rejects out-of-range IPs.
• Add MulticastPublisherBlock to the "Resources checked" summary output.

Diff Breakdown

Category	Files	Lines (+/-)	Net
Core logic	1	+67 / -2	+65
Tests	1	+238 / -2	+236
Docs	1	+2 / -0	+2
Total	2	+307 / -4	+303

Mostly tests and a small, pattern-following addition to the verify CLI. Core logic is the new verify_multicast_publisher_block function plus imports/wiring.

Key files (click to expand)

• smartcontract/cli/src/resource/verify.rs — new verify_multicast_publisher_block function, output + counter wiring, plus 2 new tests (happy path, out-of-range ignore) and updates to 4 existing tests to register the new extension.

Testing Verification

• New unit test test_verify_multicast_publisher_block_happy_path — extension has 148.51.120.5 allocated, one publisher user holds it, expect no discrepancies.
• New unit test test_verify_multicast_publisher_ignores_out_of_range_dz_ip — covers two edge cases: a publisher with a legacy dz_ip outside the block's range, and a non-publisher UserType::Multicast user with an in-range dz_ip; both must be ignored.
• All 7 resource::verify tests pass; full doublezero_cli suite (296 tests) passes.

[juan-malbeclabs]

Clean implementation, follows the existing verifier pattern well. Two small comments inline.