feat: contract check runner

[smartcontracts]

Description
Adds a new tool for executing checks in the contracts repo. Adding this as a secondary tool for now, along with a CI job that runs all the checks. Aiming to slowly fade out the existing check system.

Note: this is a Claude-heavy PR, but it works very well

[wiz-inc-a178a98b5d]

Wiz Scan Summary

Scanner	Findings
Vulnerabilities	-
Sensitive Data	-
Secrets	-
IaC Misconfigurations	-
SAST Findings	8
Total	8

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 75.44%. Comparing base (a1e78ba) to head (8bb123f).
⚠️ Report is 6 commits behind head on develop.

Additional details and impacted files

@@             Coverage Diff             @@
##           develop   #18553      +/-   ##
===========================================
- Coverage    75.76%   75.44%   -0.33%     
===========================================
  Files          189      189              
  Lines        11233    11233              
===========================================
- Hits          8511     8475      -36     
- Misses        2576     2614      +38     
+ Partials       146      144       -2     

Flag	Coverage Δ
cannon-go-tests-64	66.58% <ø> (-0.82%)	⬇️
contracts-bedrock-tests	80.40% <ø> (-0.05%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.
see 6 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[smartcontracts]

Reviewed the Wiz findings, they're all overly cautious and just expected behavior of the script