fix: SC-HARD-01/02 workspace reconciliation & event migration; FE-HAR… - #1459

…D-49/50 CSP hardening & Dockerfile optimization

SC-HARD-01 (StellarDevHub#1347):
- Add automated_testing_suite and cicd_pipeline to workspace members
- Ensure contract_events and peer_review are fully reconciled in members list
- Remove exclude block; all 36 crates now compile under a single workspace
- Release profile already tuned: opt-level=z, lto, strip

SC-HARD-02 (StellarDevHub#1348):
- Annotate all event structs in contract_events/src/lib.rs with #[contractevent]
- Migrate hackathon-team-matching/src/lib.rs: replace symbol_short publish calls
  with typed #[contractevent] structs (DeveloperRegistered, TeamCreated,
  JoinRequested, JoinAccepted, DeveloperInvited, InvitationAccepted,
  TeamLeft, MemberRemoved, TeamClosed)

FE-HARD-49 (StellarDevHub#1345):
- Remove unsafe-inline / unsafe-eval from production CSP in middleware.ts
- Add nonce-based script-src with strict-dynamic in production
- Add HSTS (max-age=63072000; includeSubDomains; preload) in production
- Add X-Content-Type-Options, X-Frame-Options, Referrer-Policy,
  Permissions-Policy hardening headers
- Rewrite csp-config.ts: strict production policy, permissive dev policy,
  DOMPurify sanitizeHtml() and sanitizeText() wrappers for markdown/terminal

FE-HARD-50 (StellarDevHub#1346):
- Add output: standalone to next.config.ts for minimal Docker image
- Add immutable Cache-Control headers for /_next/static and font assets
- Fix Dockerfile: correct apk add syntax, remove redundant node_modules copy,
  use standalone output correctly, wget-based healthcheck
- Add frontend/.dockerignore to exclude tests, snapshots, env files, docs

Misc:
- Update .gitignore: add .vitest-cache/, k6-results/ to snapshot/coverage block