feat: explorer API, wallet, CCIP scripts, and config refresh

- Backend REST/gateway/track routes, analytics, Blockscout proxy paths.
- Frontend wallet and liquidity surfaces; MetaMask token list alignment.
- Deployment docs, verification scripts, address inventory updates.

Check: go build ./... under backend/ (pass).
Made-with: Cursor

backend/api/rest/transactions.go

@@ -52,14 +52,22 @@ func (s *Server) handleListTransactions(w http.ResponseWriter, r *http.Request)
 	}
 
 	if fromAddress := r.URL.Query().Get("from_address"); fromAddress != "" {
-		query += fmt.Sprintf(" AND from_address = $%d", argIndex)
-		args = append(args, fromAddress)
+		if !isValidAddress(fromAddress) {
+			writeValidationError(w, ErrInvalidAddress)
+			return
+		}
+		query += fmt.Sprintf(" AND LOWER(from_address) = $%d", argIndex)
+		args = append(args, normalizeAddress(fromAddress))
 		argIndex++
 	}
 
 	if toAddress := r.URL.Query().Get("to_address"); toAddress != "" {
-		query += fmt.Sprintf(" AND to_address = $%d", argIndex)
-		args = append(args, toAddress)
+		if !isValidAddress(toAddress) {
+			writeValidationError(w, ErrInvalidAddress)
+			return
+		}
+		query += fmt.Sprintf(" AND LOWER(to_address) = $%d", argIndex)
+		args = append(args, normalizeAddress(toAddress))
 		argIndex++
 	}
 
@@ -139,6 +147,12 @@ func (s *Server) handleListTransactions(w http.ResponseWriter, r *http.Request)
 
 // handleGetTransactionByHash handles GET /api/v1/transactions/{chain_id}/{hash}
 func (s *Server) handleGetTransactionByHash(w http.ResponseWriter, r *http.Request, hash string) {
+	if !s.requireDB(w) {
+		return
+	}
+
+	hash = normalizeHash(hash)
+
 	// Validate hash format (already validated in routes.go, but double-check)
 	if !isValidHash(hash) {
 		writeValidationError(w, ErrInvalidHash)