fix: SC-HARD-01/02 workspace reconciliation & event migration; FE-HAR…

[Danieljyde]

…D-49/50 CSP hardening & Dockerfile optimization

SC-HARD-01 (#1347):

• Add automated_testing_suite and cicd_pipeline to workspace members
• Ensure contract_events and peer_review are fully reconciled in members list
• Remove exclude block; all 36 crates now compile under a single workspace
• Release profile already tuned: opt-level=z, lto, strip

SC-HARD-02 (#1348):

• Annotate all event structs in contract_events/src/lib.rs with #[contractevent]
• Migrate hackathon-team-matching/src/lib.rs: replace symbol_short publish calls with typed #[contractevent] structs (DeveloperRegistered, TeamCreated, JoinRequested, JoinAccepted, DeveloperInvited, InvitationAccepted, TeamLeft, MemberRemoved, TeamClosed)

FE-HARD-49 (#1345):

• Remove unsafe-inline / unsafe-eval from production CSP in middleware.ts
• Add nonce-based script-src with strict-dynamic in production
• Add HSTS (max-age=63072000; includeSubDomains; preload) in production
• Add X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy hardening headers
• Rewrite csp-config.ts: strict production policy, permissive dev policy, DOMPurify sanitizeHtml() and sanitizeText() wrappers for markdown/terminal

FE-HARD-50 (#1346):

• Add output: standalone to next.config.ts for minimal Docker image
• Add immutable Cache-Control headers for /_next/static and font assets
• Fix Dockerfile: correct apk add syntax, remove redundant node_modules copy, use standalone output correctly, wget-based healthcheck
• Add frontend/.dockerignore to exclude tests, snapshots, env files, docs

Misc:

• Update .gitignore: add .vitest-cache/, k6-results/ to snapshot/coverage block
• closes
• closes [FE-HARD-49] Strict XSS Defense, DOM Sanitization & Content Security Policy (CSP) #1345
• closes [FE-HARD-50] Multi-Stage Next.js Production Dockerfile & CDN Edge Optimization #1346
• closes [SC-HARD-01] Workspace Member Reconciliation, SDK v22+ Alignment & Compilation Hardening #1347
• closes [SC-HARD-02] Canonical Event Schema Migration & Deprecation Elimination #1348

[drips-wave]

@Danieljyde Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

[vercel]

@Danieljyde is attempting to deploy a commit to the Ayomide Adeniran's projects Team on Vercel.

A member of the Team first needs to authorize it.