fix: add era replay guard for rewards submissions

[ahmadkaouk]

Summary

• guard DataHavenServiceManager.submitRewards by (startTimestamp, duration, token) so each reward window can only be submitted once per token
• expose the replay-guard state and error in the interface, add Foundry coverage, wire the missing runtime std features, and regenerate the Wagmi/storage/state-diff artifacts
• fix the local slash E2E path by aligning the anvil Snowbridge messageOrigin with stagenet-local, refreshing the tracked anvil deployment metadata, and waiting for ServiceManager.SlashingComplete

Testing

• cargo fmt --all -- --check
• forge test --match-contract RewardsSubmitterTest
• forge test --match-contract StorageLayoutTest -vvv
• ./scripts/check-storage-layout.sh
• ./scripts/check-storage-layout-negative.sh
• bun ./scripts/check-generated-state.ts
• bun generate:wagmi
• bun test ./e2e/suites/slash.test.ts --timeout 1200000 --test-name-pattern "verify we have the agent origin set|Activate slashing|use sudo to slash operator"

Notes

• Slash E2E verification reran the previously failing sudo slash path; the long liveness scenario was not rerun end to end.