sync: mirror deployed github repo (chains + sanitized bridge), keep GitLab CI

Make this monorepo's tracked tree identical to the deployed github repo
(github.com/pezkuwichain/pezkuwi-DKS): all RC/AH/People runtimes and framework
carry the mainnet fixes (incl. U128CurrencyToVote everywhere, so the staking
election stall cannot recur), and tools/usdt-bridge matches the current,
public-safe custody tooling (real config/deploy units gitignored, secret-file
locations and server IPs stripped, sanitized *.example templates committed).

Only exception to the mirror: GitLab-native CI is preserved (.gitlab-ci.yml and
.gitlab/), to be rebuilt to match the github CI pipeline in a follow-up.

.github/workflows/quick-checks.yml

@@ -0,0 +1,67 @@
+name: quick-checks
+
+# Fast, lightweight correctness gates. These run on GitHub-hosted runners (free,
+# parallel) so they do not consume the self-hosted build runner. Ported and adapted
+# from the upstream Substrate quick-checks.
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  # Cargo.toml formatting is consistent (taplo).
+  toml-format:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - name: Install taplo
+        run: cargo install taplo-cli --locked -q || cargo install taplo-cli --locked
+      - name: Check TOML formatting
+        run: taplo format --check --config .config/taplo.toml
+
+  # Feature propagation is correct across the dependency tree (std / runtime-benchmarks
+  # / try-runtime). Broken propagation can produce a runtime that does not build no_std
+  # — a fund-critical correctness property.
+  zepter:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - name: Install zepter
+        run: cargo install zepter@1.82.1 --locked -q || cargo install zepter@1.82.1 --locked
+      - name: Run zepter
+        run: zepter run check
+
+  # No leftover CI-blocking markers in the tree.
+  fail-ci:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - name: Check for FAIL-CI markers
+        run: |
+          set -e
+          if grep -rI --include="*.rs" --exclude-dir=target "FAIL-CI" .; then
+            echo "::error::Found FAIL-CI marker(s) — resolve before merging."
+            exit 1
+          fi
+          echo "no FAIL-CI markers"
+
+  # No git dependencies sneak into the workspace (reproducibility). Vendored/patched
+  # crates are allowed via [patch]; this guards [dependencies].
+  no-git-deps:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - name: Install checker deps
+        run: python3 -m pip install --break-system-packages "cargo-workspace>=1.2.4" toml
+      - name: Deny git dependencies in [workspace.dependencies]
+        # [patch.crates-io] entries (vendored/wasm-fix forks) are allowed and not checked.
+        run: python3 .github/scripts/deny-git-deps.py .