Add pre-production hardening and Base Sepolia reader

[FlowmemoryAI]

Summary

• Adds a constrained Base Sepolia FlowPulse reader with explicit RPC/address inputs, chain-id enforcement, canonical state output, and durable checkpoint persistence.
• Adds contracts hardening docs/scripts for static analysis, deployment boundary, access-control review, and stronger Rootfield ownership event tests.
• Adds production-readiness and marketing claim guardrails, plus CI enforcement for unsafe README/docs/marketing claims.

Checks

• npm test
• npm run launch:v0
• .\infra\scripts\contracts-static-analysis.ps1
• node infra/scripts/check-unsafe-claims.mjs
• git diff --check

Boundary

This is still local/test and Base Sepolia pre-production hardening. It does not claim production mainnet readiness, production L1, production verifier network, free storage, or AI running on-chain.

Notes

Slither is optional in the local hardening script by default because it is not installed in this environment. Audit environments can require it with -RequireSlither or REQUIRE_SLITHER=1.