feat(token-aggregation): reports, PMM quotes, config; Engine X flash vaults

- Expand token-aggregation API (report routes), canonical tokens, pools
- Add flash vault contracts + tests (indexed, DODO cwUSDC, XAUT borrow)
- PMM pools JSON, deploy/export scripts, metamask verified list

Co-authored-by: Cursor <cursoragent@cursor.com>

scripts/deployment/deploy-dapp-lxc.sh

@@ -3,10 +3,12 @@
 # Usage: ./scripts/deployment/deploy-dapp-lxc.sh [--dry-run] [--skip-create]
 #   --dry-run     Print commands only.
 #   --skip-create Use existing container 5801 (only install/build/serve).
-# Env: PROXMOX_HOST (optional; if unset, run pct on current host), NODE (optional; pct --node),
+# Env: PROXMOX_HOST (defaults from VMID via proxmox scripts/lib/load-project-env.sh get_host_for_vmid),
+#      NODE (optional; only with DEPLOY_PCT_ON_LOCAL_PVE=1 on a PVE node: pct --node),
 #      VMID, HOSTNAME, IP_DAPP_LXC, TEMPLATE, STORAGE, NETWORK, MEMORY_MB, CORES, DISK_GB,
 #      REPO_URL (git URL to clone) or REPO_PATH (local path to copy; no git in container),
 #      ENV_FILE (path to .env for VITE_*).
+#      DEPLOY_PCT_ON_LOCAL_PVE=1 — only on a Proxmox hypervisor: run pct locally (no SSH).
 # See: docs/03-deployment/DAPP_LXC_DEPLOYMENT.md
 
 set -euo pipefail
@@ -48,6 +50,16 @@ for a in "$@"; do
   [[ "$a" == "--skip-create" ]] && SKIP_CREATE=true
 done
 
+PROXMOX_MONOREPO_ROOT="$(cd "$SMOM_ROOT/.." && pwd)"
+if [[ -f "$PROXMOX_MONOREPO_ROOT/scripts/lib/require-proxmox-ssh-for-pct.sh" ]]; then
+  # shellcheck disable=SC1091
+  source "$PROXMOX_MONOREPO_ROOT/scripts/lib/require-proxmox-ssh-for-pct.sh"
+  require_proxmox_ssh_for_pct || exit 1
+else
+  echo "ERROR: Missing $PROXMOX_MONOREPO_ROOT/scripts/lib/require-proxmox-ssh-for-pct.sh (run from proxmox monorepo checkout)." >&2
+  exit 1
+fi
+
 run_cmd() {
   if [[ -n "$PROXMOX_HOST" ]]; then
     ssh $SSH_OPTS root@"$PROXMOX_HOST" "$@"
@@ -76,7 +88,7 @@ echo ""
 
 if ! $SKIP_CREATE; then
   if $DRY_RUN; then
-    echo "[DRY-RUN] Would create LXC $VMID on ${PROXMOX_HOST:-local} with hostname=$HOSTNAME, ip=$IP/24"
+    echo "[DRY-RUN] Would create LXC $VMID on ${PROXMOX_HOST:-this Proxmox node (local pct)} with hostname=$HOSTNAME, ip=$IP/24"
     exit 0
   fi
 

scripts/deployment/export-cronos-verification-sources.sh

@@ -7,6 +7,8 @@ SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
 OUT_DIR="$PROJECT_ROOT/.cronos-verify"
 cd "$PROJECT_ROOT"
+# Cronos mainnet requires Paris EVM bytecode (no PUSH0). Match `foundry.toml` profile `cronos_legacy`.
+export FOUNDRY_PROFILE="${FOUNDRY_PROFILE:-cronos_legacy}"
 # Load .env via dotenv (RPC CR/LF trim). Fallback: raw source.
 if [[ -f "$SCRIPT_DIR/../lib/deployment/dotenv.sh" ]]; then
   # shellcheck disable=SC1090
@@ -68,5 +70,7 @@ echo "Next: https://explorer.cronos.org/verifyContract"
 echo "  1. Select 'Solidity (Standard-Json-Input)'"
 echo "  2. Upload the *_standard_input.json file for each contract"
 echo "  3. See docs/deployment/CRONOS_VERIFICATION_RUNBOOK.md"
+echo "  4. The verify form uses Google reCAPTCHA — Submit stays disabled until solved in the browser."
+echo "  5. Compiler picker may list 0.8.21+ only; Foundry uses solc 0.8.20 by default — pick the version that matches deploy bytecode if verification fails."
 echo ""
 echo "Sources: $OUT_DIR/"