[Wave 9] Add supply-chain checks for contract CI dependencies and actions

[truthixify]

Problem

Contract CI mixes floating action versions and tool installers without a consistent provenance or update policy.

Done when

• Pin third-party actions and compiler tools to reviewed versions or digests.
• Add dependency review for npm, Cargo, and container inputs.
• Record the toolchain versions used for release artifacts.
• Document the update and re-audit process.

[dunnidev]

@dunnidev has applied to work on this issue as part of the Stellar Wave Program's 9th wave.

Hello Maintainer, i can fix this issue

ℹ️ Repo Maintainers: To accept this application, review their application or assign @dunnidev to this issue.

[retkatmun]

@retkatmun has applied to work on this issue as part of the Stellar Wave Program's 9th wave.

Hi Maintainer,

I’m a smart contract and full-stack developer and would love to contribute to this issue. I’m an experienced contributor with hands-on expertise in Rust, Soroban, Cairo, and TypeScript.

I’m passionate about building secure, scalable blockchain solutions, with a strong emphasis on writing clean and maintainable code. Based on the scope of this issue, I’m confident I can deliver a complete solution within 24 hours of assignment.

I’d greatly appreciate the opportunity to contribute and help move this forward.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @retkatmun to this issue.

[Fatsaf]

@Fatsaf has applied to work on this issue as part of the Stellar Wave Program's 9th wave.

Hello Maintainer, I’d like to take on this issue. I’ve reviewed the requirements and I’m ready to start immediately. I’ll aim to deliver a clean, well-tested PR within 1–2 hours.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Fatsaf to this issue.

[leadgenexpert454]

@leadgenexpert454 has applied to work on this issue as part of the Stellar Wave Program's 9th wave.

Hi Maintainer, Pls I can work on this issue

ℹ️ Repo Maintainers: To accept this application, review their application or assign @leadgenexpert454 to this issue.

[Yemmy88]

@Yemmy88 has applied to work on this issue as part of the Stellar Wave Program's 9th wave.

I would like to work on this Issue.
Kindly, Assign it to me.
Thank you.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Yemmy88 to this issue.

[olamidemutiat300-debug]

@olamidemutiat300-debug has applied to work on this issue as part of the Stellar Wave Program's 9th wave.

Hello, I would love to work on this issue

ℹ️ Repo Maintainers: To accept this application, review their application or assign @olamidemutiat300-debug to this issue.

[Nemenwq]

@Nemenwq has applied to work on this issue as part of the Stellar Wave Program's 9th wave.

Hi, I’d like to work on this issue. I’ve reviewed the requirements and would be happy to take it on. Please assign it to me. Thank you!

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Nemenwq to this issue.