ci: update CircleCI config to use just instead of make

[ajsutton]

Summary

• Migrates all CircleCI make invocations to just for targets that have been migrated to justfiles in the stack below
• Converts make -C <dir> <target> patterns to working_directory + just <target>
• Converts make <target> VAR=val patterns to VAR=val just <target>

Remaining make calls (intentionally unchanged)

• make fuzz in parameterized fuzz job — runs for op-challenger, op-node, op-service, op-chain-ops which are not yet migrated

Stack

1. optimism#19473 — linter migration + shared infrastructure
2. optimism#19474 — cannon migration
3. optimism#19475 — op-e2e migration
4. optimism#19476 — op-program migration
5. optimism#19477 — root Makefile migration
6. This PR — CI config update
7. optimism#19483 — cannon testdata migration

Test plan

• CI passes with all migrated targets using just directly

🤖 Generated with Claude Code

[wiz-inc-a178a98b5d]

Wiz Scan Summary

Scanner	Findings
Vulnerabilities	-
Sensitive Data	-
Secrets	-
IaC Misconfigurations	-
SAST Findings	-
Software Management Findings	-
Total	-

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 75.7%. Comparing base (9a50c60) to head (dc80630).
⚠️ Report is 2 commits behind head on develop.

Additional details and impacted files

@@             Coverage Diff             @@
##           develop   #19482      +/-   ##
===========================================
+ Coverage     75.3%    75.7%    +0.4%     
===========================================
  Files          194      671     +477     
  Lines        11285    71270   +59985     
===========================================
+ Hits          8502    54012   +45510     
- Misses        2639    17114   +14475     
  Partials       144      144              

Flag	Coverage Δ
cannon-go-tests-64	66.4% <ø> (ø)
contracts-bedrock-tests	80.2% <ø> (ø)
unit	75.8% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.
see 477 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[sebastianst]

Review: CircleCI config make → just migration

Clean, mechanical migration. Each change is a straightforward make → just substitution. A few notes:

1. make -j reproducible-prestate → just reproducible-prestate — lost parallelism

The original make -j reproducible-prestate would run reproducible-prestate-op-program and reproducible-prestate-kona in parallel (Make's -j flag). Just runs dependencies sequentially, so these two Docker-based prestate builds now run one after the other. This could noticeably increase CI wall time for the cannon-prestate job since each involves Docker builds.

2. make sanitize-program GUEST_PROGRAM=... → GUEST_PROGRAM=... just sanitize-program

Verified this works — the cannon justfile's sanitize-program uses $GUEST_PROGRAM as a shell env var in a shebang script (not a just parameter), so the env var prefix correctly passes it through.

3. cd cannon && make → cd cannon && just cannon

The original ran Make's default target (implicitly cannon). The new version explicitly names the target. Correct.

Everything else looks good

• make -C <dir> <target> correctly converted to either just <target> with working_directory: <dir>, or just <target> at root (for targets that delegate internally)
• make <<parameters.rule>> → just <<parameters.rule>> for the parameterized go-tests job
• make fuzz intentionally left as-is (per PR description, those packages aren't migrated yet)
• Job name "Run Go tests via Makefile" → "Run Go tests" — nice cleanup

---

Review generated by Claude Code