Preprod readiness: wire contract circuits, link ledger parser, fix CVEs, add feature flags

[Copilot]

Completes the contract integration layer so the codebase is ready for preprod deployment once contract addresses are populated.

Security: npm vulnerabilities (27 → 8, 0 critical/high)

• npm audit fix resolves 19 transitive vulnerabilities
• react-router-dom 6.17.0 → 6.30.3 in both frontends (XSS via open redirect, GHSA-2w69-qvjg-hvjx)
• Remaining 8 are low/moderate with no available fix (elliptic transitive, esbuild dev-only)

Link @autodiscovery/contract ledger parser into discovery-core-reader

• Add workspace dependency @autodiscovery/contract: "*" to frontend-realdeal
• Replace heuristic rawState.includes(id) string matching with typed DiscoveryCore.ledger() calls in both frontends

import { DiscoveryCore } from '@autodiscovery/contract';

const parsed = DiscoveryCore.ledger(rawState as any);
const exists = parsed.caseStatusByCaseIdentifier.member(caseId);
const statusCode = Number(parsed.caseStatusByCaseIdentifier.lookup(caseId));

Wire callTx.* circuit calls in all 6 providers

• New chain/bytes-utils.ts with hexToBytes32, tierToNumber, categoryToNumber, stringToBytes32
• All 6 providers use wallet-guard pattern — local-only fallback when wallet isn't connected:

Provider	Circuit
real-case	createNewCase + chain mapping storage
real-compliance	attestStepLevelCompliance
real-access-control	grantDocumentAccessToParticipant, revokeDocumentAccessFromParticipant
real-document	registerDocument
real-expert-witness	registerExpertWitness
real-jurisdiction	verifyRulePackHashMatchesExpected

Feature flags for off-chain providers

• VITE_FEATURE_AI, VITE_FEATURE_EMAIL_SAFETY, VITE_FEATURE_CONTACTS — default true, set "false" to disable
• When disabled, providers return safe defaults (empty arrays, zero scores) instead of operating

Still requires manual action

• Contract deployment: deploy 6 Compact contracts to preprod, populate VITE_CONTRACT_* env vars
• configureProviders() was already complete in midnight-connection.ts — no changes needed

[SpyCrypto]

@copilot resolve the merge conflicts in this pull request

[Copilot]

@copilot resolve the merge conflicts in this pull request

Resolved all 9 merge conflicts in ce70fd6:

• package.json: merged dependency lists (added dapp-connector-api, fetch-zk-config-provider from main)
• .env.realdeal: accepted deletion (now gitignored per main's a22eeb6)
• 6 provider files + discovery-core-reader.ts: accepted main's Phase 2 implementations (participantPublicKey handling, _ledgerParser dynamic import, proper type casts, improved error messages)

All 39 frontend-realdeal tests pass, lint shows 0 errors.