chore: update vulnerable dependencies (keccak, time, bytes)
Fix 3 of 4 Dependabot alerts by bumping transitive dependencies:
- keccak 0.1.5 -> 0.1.6 (unsoundness in ARMv8 assembly backend)
- time 0.3.45 -> 0.3.47 (stack exhaustion DoS)
- bytes 1.11.0 -> 1.11.1 (integer overflow in BytesMut::reserve)
The 4th alert (tracing-subscriber 0.2.25 -> 0.3.20) requires an upstream
update in ark-poly and cannot be fixed from this repo.
refactor: split enable_state_gas into enable_tip1016 and enable_amsterdam_eip8037
Replace the single enable_state_gas CfgEnv flag with two independent flags:
- enable_tip1016: controls state gas tracking mechanism (reservoir,
dual gas limits, record_state_cost). Must be set explicitly.
- enable_amsterdam_eip8037: controls EIP-8037 hash cost for deployed
bytecode. Auto-enabled by set_spec_and_mainnet_gas_params(AMSTERDAM).
The Cfg trait gains is_amsterdam_eip8037_enabled() alongside the
existing is_state_gas_enabled() (now backed by enable_tip1016).
The hash cost gate in return_create uses the new flag instead of
a hardcoded spec check.
Amp-Thread-ID: https://ampcode.com/threads/T-019caead-a5f3-717c-b99e-5c93cedef367
Co-authored-by: Amp <amp@ampcode.com>