chore: promote dev to canary

[iap]

Promotes dev to canary for staging validation.

Changes since last promotion: EIP-712 migration, CEI fix, IRYLA interface, bridge safety (try/catch + BridgeFailed), RYLA Credits name, NatSpec improvements, audit docs (THREAT_MODEL, KNOWN_ISSUES), invariant and bridge integration tests, CI improvements (CodeQL matrix name, release gate caching, secrets drift guard tightening), governance fixes, frontend protocol info page, staging rehearsal passed on OP Sepolia (run 25623319234).

Scope: contracts, workflows, ops, frontend, docs

Verification: 74 tests passing locally (make ci-full). Staging rehearsal passed on OP Sepolia.

Risk: Low. All changes have passed CI on dev. Staging rehearsal will re-run on merge.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 3d959d94-86d0-4bec-8c92-cd0fab525fc8

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dev

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 4057da5cb9

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Drop path-filtered CodeQL check from required list

apply-governance.sh now requires Analyze (javascript-typescript) on every protected branch, but .github/workflows/codeql.yml only runs for PRs that touch src/**, contracts/**, package.json, pnpm-lock.yaml, or the workflow file itself (on.pull_request.paths, lines 6-11). For PRs outside those paths (for example docs-only changes), GitHub will not create that check run, leaving a required check pending and blocking merges until someone bypasses protections or edits unrelated files.

Useful? React with 👍 / 👎.

[chatgpt-codex-connector]

Avoid requiring Release Gate for non-contract PRs

apply-governance.sh makes Release Gate Container a required check for all PRs, but .github/workflows/contracts-release-gate-container.yml is path-scoped to contracts/** and its own workflow file (on.pull_request.paths, lines 5-7). Any PR that does not touch those paths will not trigger this job, so the required check never reports and the PR is blocked from merging.

Useful? React with 👍 / 👎.