Drop unused Hardhat/npm stack to close Dependabot alerts

[vm06007]

Summary

• This repo is Foundry-only (no hardhat.config, no JS tests). The leftover Hardhat 2 / ethers 5 / waffle / web3 1 tree in package-lock.json was the source of the open Dependabot alerts (bn.js, elliptic, tar, yargs-parser, qs, tmp, web3-core-subscriptions, and ~25 others).
• Removed those unused npm dependencies and regenerated an empty lockfile. Foundry CI no longer runs npm install; foundry.toml now looks only at lib/ (git submodules).

Test plan

• Confirm Foundry workflows pass (build sizes + gas report) without npm install
• After merge, check Dependabot alerts auto-close (expect the 37 open npm alerts to go to 0)
• forge build --sizes and forge test still work locally with submodules checked out

Made with Cursor