feat(L1): deploy hinted nitro validator stack

[leopoldjoy]

Summary

• add a standalone Solidity 0.8.26 deployment script for P384Verifier -> CertManager -> NitroValidator
• use named direct lib/... imports and scoped 10,000-run compiler restrictions matching upstream
• require explicit nonzero CertManager owner and revoker arguments
• test deployment wiring, root-cache initialization, role assignment, and EIP-170 runtime sizes

Behavior

The script is opt-in and does not change the standard system deployment. TEEProverRegistry continues to use the configured legacy NitroEnclaveVerifier until C3.

Testing

• clean just test --match-path test/deploy/DeployNitroValidatorStack.t.sol (3 passed)
• targeted script size build: CertManager 23,784 bytes with 792 bytes of EIP-170 margin
• CI-equivalent lint, build, snapshots, and full test workflow (1,268 passed, 1 skipped)
• just snapshots with no snapshot diff

Stack

• depends on chore(L1): pin hinted nitro validator #394
• base branch is feat/nitro-validator-c1, not main

[cb-heimdall]

✅ Heimdall Review Status

Requirement	Status	More Info
Reviews	✅ 1/1	Denominator calculation Show calculation 1 if user is bot 0 1 if user is external 0 2 if repo is sensitive 0 From .codeflow.yml 1 Additional review requirements Show calculation Max 0 0 From CODEOWNERS 0 Global minimum 0 Max 1 1 1 if commit is unverified 0 Sum 1