feat: metered WASM compute, QRC-20 token UX, audit fixes; untrack issuer keypair

Node / core:
- Meter WASM execution by consumed fuel: symmetric sender-refund / producer-credit
  move (supply-conserving); validator recompute byte-identical to producer fill loop.
- Enforce per-block BLOCK_FUEL_LIMIT over reserved fuel at both producer-fill and verify.
- QRC-20 deploy charges storage deposit; refund fails loud on underfunded escrow.
- mempool included_tx_hashes gains a hard count cap (anti-OOM) atop the age window.
- Reject dormant Swap tx at RPC and gossip admission.
- Emit token total_supply / balance as JSON strings (u64 > 2^53 precision).
- Return msg.value to caller on VM trap / over-cap.

Clients:
- Mobile: import held + custom QRC-20 tokens, send QRC-20 (BigInt/string-safe).
- Explorer: address token holdings, token page + directory, tx-type decode,
  real per-IP rate limiting (fail-closed on mainnet misconfig).
- Wallet extension: wire popup Send to background sendTransaction (QNC).

Repo hygiene:
- Untrack infrastructure/config/issuer_keypair.json (kept on disk; now gitignored).
- Repair .gitignore UTF-16 corruption that silenced the backups/ rule.
- Ignore build artifacts (*.rlib, *.tsbuildinfo).
- Remove dead subsystems; correct docs to pure-Dilithium and metered fee model.

Validated: cargo check clean; qnet-state 114, qnet-integration 200, qnet-mempool 2
lib tests green; adversarial fee-metering review 7/7 refuted.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: AIQnetLab

.gitignore

@@ -596,16 +596,16 @@ testing/integration/*/IDENTITY
 testing/integration/*/LOCK
 testing/integration/*/LOG*
 testing/integration/*/MANIFEST-*
-testing/integration/*/OPTIONS-*b a c k u p s /
-
-
+testing/integration/*/OPTIONS-*backups/
+
+
 # Private scripts (not for public distribution)
 scripts/install-genesis.sh
-a s s e t s /
-
-
-
-
+assets/
+
+applications/qnet-mobile/android/gradle/wrapper/gradle-*-bin/
+
+
 # QNet Explorer - Local data
 applications/qnet-explorer/frontend/node_data_local/
 applications/qnet-explorer/frontend/data/
@@ -674,5 +674,16 @@ infrastructure/nginx/ssl/*.pem
 infrastructure/nginx/ssl/*.key
 infrastructure/nginx/ssl/*.crt
 
+# Secret keypair (contains private_key_b58) — must NEVER be tracked
+infrastructure/config/issuer_keypair.json
+**/issuer_keypair.json
+
 # overnight audit scaffolding + findings (local, do not track)
 audit-overnight/
+
+# local scratch (workflow scripts, temp captures) — never track
+dev-scratch/
+
+# Build artifacts (never track)
+*.rlib
+*.tsbuildinfo

Cargo.lock

@@ -5,6 +5,7 @@ members = [
     "core/qnet-mempool",
     "core/qnet-state",
     "core/qnet-sharding",
+    "core/qnet-vm",
     "development/qnet-integration",
     "audit"
 ]