feat(L3): add attested withdrawal redemption

[hughy]

Summary

• Add attestedWithdraw to L2ToL1MessagePasser. It records a chain-bound ETH authorization in MessagePasser storage for enclave inclusion checks.
• Add redeemAttestedWithdrawal to OptimismPortal2. It validates the domain-separated raw signature from a registered TEE signer, prevents replay, honors the Portal pause state, and pays ETH from Portal escrow.
• Wire the TEE registry for new multiproof deployments and Portal upgrades. Update interfaces and generated ABI, storage-layout, and semver snapshots.

Test plan

• just test
• just snapshots-check-no-build
• just semver-lock
• forge fmt --check
• git diff --check