Neo X Reth 2.5.0

neox-v2.5.0

Reth 2.5.1 baseline sync, two protocol-facing Neo X changes, and dBFT
robustness hardening.

• Policy blacklist execution now matches Geth v0.6.2 at every EVM call
  boundary, reverting CALL/CALLCODE/DELEGATECALL/STATICCALL frames to
  blacklisted targets without aborting the parent.
• DKG committee size is no longer fixed at seven: chainspec parsing, dBFT
  validation, Governance decoding, canonical DKG replay, keystore
  migration, and KeyManagement ABI encoding all follow the configured
  committee, with --validator.dkg-size selecting the size for new
  keystores. ZK-v1 keeps Geth's deployed one/two/seven circuit boundary.
• dBFT sync driver hardening: a canonical notification resolving to the
  already-active head no longer discards in-round consensus state,
  re-arming the round timer aborts the superseded sleep task instead of
  leaking it, and authenticated messages arriving while no round is
  active are deferred by height rather than dropped.

Canonical MainNet and T4 genesis files are unchanged. Validator mode
remains experimental.