Run the pinned CometBFT single-node vertical

[kaikisegfault]

Outcome

• derive the protocol chain ID and height-zero root through the C++ kernel
• initialize an exact CometBFT v0.39.4 home and run its official full-node path
• commit two independently modelled signed transfers across a complete node, bridge, and application restart
• verify exact receipts, current ABCI Info state, prior-height block-header hashes, and the durable C++ root
• integrate all Go tests, vet, three cgo-free builds, and the live node scenario into tools/verify.sh
• resolve the full-node graph on GitHub-hosted runners and reject any compiled DTLS v2 package
• keep the owner machine resource-constrained and clean through explicit repository policy

Verification

• exact code candidate 0f3ad7d: hosted run 30385969246 passed GCC/Clang debug and both ASan/UBSan jobs
• hosted resolver run 30385565279 passed checksum verification, all Go tests, vet, the no-DTLS-v2 closure gate, and the cgo-free node build
• GitHub branch dependency comparison reports zero vulnerabilities
• final documentation head ef687ef is running the required hosted checks
• local reproducible artifacts were removed with tools/clean-local.sh; no local build cache remains

Closes #22