feat(sepolia): extend Nitro validator cutover task for Sepolia

[leopoldjoy]

Summary

• revert the archive move from chore(zeronet): archive Nitro validator cutover task #782 and restore the feat(zeronet): add Nitro validator cutover task #781 Nitro validator cutover task under active/evm/tasks
• add Sepolia configuration alongside the completed Zeronet configuration
• scope deployment addresses to config/$(TASK_NETWORK)/addresses.json and preserve the existing Zeronet addresses as a 100% rename
• require TASK_NETWORK on every Make command line and reject missing, empty, defaulted, or inherited environment values
• keep one authoritative, network-agnostic root facilitator guide with prominent NETWORK_NAME replacement instructions

This supersedes the closed #783. The combined task should be archived only after the Sepolia rollout is executed and recorded.

Network Selection

The task does not define a default network. Before running the root facilitator guide, replace every NETWORK_NAME placeholder and use visible per-command selection such as:

make TASK_NETWORK=sepolia deploy-nitro-validator

A stale exported TASK_NETWORK is rejected because the Makefile requires the variable origin to be command line.

The root guide derives network-specific values from config/NETWORK_NAME/.env, config/NETWORK_NAME/addresses.json, and config/NETWORK_NAME/README.md. It also contains the shared non-mainnet/mainnet task-origin validation instructions, so no duplicate per-network facilitator files are needed.

Address Artifact Scoping

The merged active-task documentation did not define an addresses.json location. #781 inherited a task-root path from legacy single-network tasks and an unmerged reorganization prototype. That was valid for its original Zeronet-only scope, but the flat JSON schema would be overwritten by a second network deployment. This PR makes the artifact explicitly network-scoped while preserving all historical Zeronet data unchanged.

Sepolia Configuration

• TEE registry proxy: 0xf0d7E15673fBA052e83d7f2b26BB6071E86b972e
• current implementation: 0xF9Ab55c35cE7Fb183A50E611B63558499130D849
• legacy Nitro verifier: 0x7D8EA07DB94128DBEe66bAfa3eBAa9668B413d72
• CertManager owner: 0x646132A1667ca7aD00d36616AFBA1A28116C770A
• CertManager revoker: 0x8074b32bD7d06C8f27596F3D6fbf867A36eA22a3

These values were checked against the repository network config and live Ethereum Sepolia state.

Verification

• confirmed a missing TASK_NETWORK fails
• confirmed an environment-inherited TASK_NETWORK fails
• make TASK_NETWORK=sepolia deps
• make TASK_NETWORK=sepolia validate-deploy-config
• make TASK_NETWORK=zeronet validate-upgrade-config
• Sepolia deployment dry-run resolves ADDRESSES_JSON to config/sepolia/addresses.json
• built all three task scripts under their intended profiles
• confirmed all existing Zeronet configs, validations, records, and scripts remain unchanged

[cb-heimdall]

🟡 Heimdall Review Status

Requirement	Status	More Info
Reviews	🟡 0/2	Denominator calculation Show calculation 1 if user is bot 0 1 if user is external 0 2 if repo is sensitive 0 From .codeflow.yml 2 Additional review requirements Show calculation Max 0 0 From CODEOWNERS 0 Global minimum 0 Max 2 2 1 if commit is unverified 0 Sum 2