chore: repo cleanup and security hardening

- Remove stale root files: chain_spec.json, pezkuwi.gbp, publish.log,
  test-asset-hub.toml (moved to .claude/)
- Move publish_batch.sh and publish_crates.sh to scripts/
- Remove hardcoded /home/mamostehp/res/ paths from scripts and comments
  (WALLETS_FILE env var now required, no silent fallback)
- Update .gitignore: add protection entries for regenerable artifacts
  and .claude/ experience files

.gitignore

@@ -73,6 +73,16 @@ head.rs
 .claude/SESSION_LOG.md
 .claude/hooks/
 .claude/settings.json
+.claude/CRITICAL_STATE.md
+.claude/simulation-lessons.md
+.claude/benchmark_checklist.md
+.claude/mainnet_fresh/
+.claude/test-asset-hub.toml
+
+# Regenerable artifacts (do not commit)
+chain_spec.json
+publish.log
+pezkuwi.gbp
 
 # Zombienet binaries
 zombienet-linux

pezkuwi/runtime/pezkuwichain/src/genesis_config_presets.rs

@@ -1042,7 +1042,7 @@ fn pezkuwichain_mainnet_simulation_genesis() -> serde_json::Value {
 		hex!("28925ed8b4c0c95402b31563251fd318414351114b1c7797ee788666d27d6305").into();
 
 	// 2 validators — real mainnet Validator_01 and Validator_02 keys
-	// Seed phrases stored in /home/mamostehp/res/MAINNET_WALLETS_*.json
+	// Seed phrases stored offline in secure wallet storage
 	let initial_authorities: Vec<(
 		AccountId,
 		AccountId,

publish.log

@@ -1,33 +0,0 @@
-Sat Dec 27 19:45:29 UTC 2025 - Publishing pezsp-arithmetic
-Sat Dec 27 19:45:44 UTC 2025 - SUCCESS: pezsp-arithmetic
-Sat Dec 27 19:46:53 UTC 2025 - Publishing pezsp-runtime-interface-proc-macro
-Sat Dec 27 19:47:06 UTC 2025 - SUCCESS: pezsp-runtime-interface-proc-macro
-Sat Dec 27 19:48:15 UTC 2025 - Publishing pezsp-runtime-interface
-Sat Dec 27 19:48:19 UTC 2025 - FAILED: pezsp-runtime-interface
-    Updating crates.io index
-   Packaging pezsp-runtime-interface v24.0.0 (/home/mamostehp/pezkuwi-sdk/bizinikiwi/primitives/runtime-interface)
-    Updating crates.io index
-error: failed to prepare local package for uploading
-
-Caused by:
-  no matching package named `pezsp-io` found
-  location searched: crates.io index
-  required by package `pezsp-runtime-interface v24.0.0 (/home/mamostehp/pezkuwi-sdk/bizinikiwi/primitives/runtime-interface)`
-Sat Dec 27 19:49:28 UTC 2025 - Publishing pezsp-io
-Sat Dec 27 19:49:31 UTC 2025 - FAILED: pezsp-io
-    Updating crates.io index
-   Packaging pezsp-io v30.0.0 (/home/mamostehp/pezkuwi-sdk/bizinikiwi/primitives/io)
-    Updating crates.io index
-error: failed to prepare local package for uploading
-
-Caused by:
-  no matching package named `pezsp-core` found
-  location searched: crates.io index
-  required by package `pezsp-io v30.0.0 (/home/mamostehp/pezkuwi-sdk/bizinikiwi/primitives/io)`
-Sat Dec 27 19:50:40 UTC 2025 - Publishing pezsp-core
-Sat Dec 27 19:50:41 UTC 2025 - FAILED: pezsp-core
-    Updating crates.io index
-error: all dependencies must have a version specified when publishing.
-dependency `pezkuwi-ss58-registry` does not specify a version
-Note: The published dependency will use the version from crates.io,
-the `path` specification will be removed from the dependency declaration.

test-asset-hub.toml

@@ -1,27 +0,0 @@
-[settings]
-timeout = 300
-provider = "native"
-
-[relaychain]
-default_command = "/home/mamostehp/pezkuwi-sdk/target/release/pezkuwi"
-chain = "pezkuwichain-local"
-default_args = ["-lteyrchain=debug"]
-
-[[relaychain.nodes]]
-name = "alice"
-validator = true
-
-[[relaychain.nodes]]
-name = "bob"
-validator = true
-
-[[teyrchains]]
-id = 1000
-chain = "asset-hub-pezkuwichain-local"
-default_command = "/home/mamostehp/pezkuwi-sdk/target/release/pezkuwi-teyrchain"
-cumulus_based = true
-default_args = ["-lteyrchain=debug"]
-
-[[teyrchains.collators]]
-name = "DRQasimlo"
-validator = true

vendor/pezkuwi-subxt/subxt/examples/bond_extra_validators.rs

@@ -23,7 +23,7 @@ async fn main() -> Result<(), Box<dyn std::error::Error>> {
 
 	let url = std::env::var("RPC_URL").unwrap_or_else(|_| "ws://217.77.6.126:9944".to_string());
 	let wallets_file = std::env::var("WALLETS_FILE")
-		.unwrap_or_else(|_| "/home/mamostehp/res/MAINNET_WALLETS_20260128_235407.json".to_string());
+		.expect("WALLETS_FILE env var required (e.g. export WALLETS_FILE=/path/to/wallets.json)");
 	let bond_hez: u128 = std::env::var("BOND_EXTRA_HEZ")
 		.unwrap_or_else(|_| "499000".to_string())
 		.parse()?;