Add DeepSec workspace

[cinnabarhorse]

Summary

• Add a checked-in .deepsec workspace for the Aavegotchi contracts repo.
• Fill project-specific DeepSec context for diamond storage, meta-transactions, DAO/item/game manager auth, escrow/marketplace/VRF flows, and operational scripts.
• Add Solidity-focused DeepSec matchers so scans cover contract files instead of only the default JS/TS matcher set.

DeepSec run notes

• pnpm deepsec scan --project-id aavegotchi-geist completed: 239 files with default JS/TS candidates, 361 matches.
• pnpm deepsec scan --project-id aavegotchi-geist --matchers solidity-diamond-core,solidity-facet-entrypoint,solidity-sensitive-operation completed: 75 Solidity files with candidates, 250 matches.
• pnpm deepsec process ... did not complete in this environment. Codex runs stalled in connector reads/timeouts; Claude one-file run stayed alive but idle. Generated run metadata was reset to clean pending state so processing can be retried.

Validation

• forge build --sizes passes, with existing warnings/notes.
• npx hardhat compile blocked because npm ci failed/stalled on network dependency downloads and never created node_modules/.bin/hardhat.
• Deployment evidence: N/A, tooling/config-only change.