feat: merge dev into main with p2p, escrow, tooling, and docs updates

.gitignore

@@ -37,11 +37,15 @@ passphrase.txt
 !lango.example.json
 !contracts/deployments/*.json
 !internal/**/abi/*.json
+!examples/**/configs/*.json
 /lango
 
 .cursor/
 .vscode/
 .claude/
+.agents/
+
+AGENTS.md 
 
 # Build output
 bin/

.gitmodules

@@ -1,3 +1,6 @@
 [submodule "contracts/lib/forge-std"]
 	path = contracts/lib/forge-std
 	url = https://github.com/foundry-rs/forge-std
+[submodule "contracts/lib/openzeppelin-contracts-upgradeable"]
+	path = contracts/lib/openzeppelin-contracts-upgradeable
+	url = https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable

.golangci.yml

@@ -10,3 +10,7 @@ linters:
       - path: _test\.go
         linters:
           - errcheck
+      - linters:
+          - staticcheck
+        text: "SA5011"
+        path: _test\.go

Dockerfile

@@ -48,7 +48,7 @@ RUN chmod +x /usr/local/bin/docker-entrypoint.sh
 # Build with --build-arg INSTALL_GO=true to enable.
 ARG INSTALL_GO=false
 RUN if [ "$INSTALL_GO" = "true" ]; then \
-        curl -fsSL https://go.dev/dl/go1.25.linux-amd64.tar.gz \
+        curl -fsSL https://go.dev/dl/go1.25.4.linux-amd64.tar.gz \
         | tar -C /usr/local -xzf - ; \
     fi
 

Makefile

@@ -62,6 +62,22 @@ test-short:
 test-p2p:
 	$(GOTEST) -v -race ./internal/p2p/... ./internal/wallet/...
 
+## test-security: Run security, sandbox, and keyring tests
+test-security:
+	$(GOTEST) -v -race ./internal/security/... ./internal/sandbox/... ./internal/keyring/...
+
+## test-graph: Run graph store and GraphRAG tests
+test-graph:
+	$(GOTEST) -v -race ./internal/graph/...
+
+## test-mcp: Run MCP plugin integration tests
+test-mcp:
+	$(GOTEST) -v -race ./internal/mcp/...
+
+## test-economy: Run economy layer tests (budget, escrow, pricing)
+test-economy:
+	$(GOTEST) -v -race ./internal/economy/...
+
 ## bench: Run benchmarks
 bench:
 	$(GOTEST) -bench=. -benchmem ./...
@@ -179,7 +195,7 @@ help:
 
 .PHONY: build build-linux build-darwin build-all install \
         dev run \
-        test test-short test-p2p bench coverage \
+        test test-short test-p2p test-security test-graph test-mcp test-economy bench coverage \
         fmt fmt-check vet lint generate check-abi ci \
         deps \
         codesign \