op-node: Properly check storage proof

The storage proof was not being properly checked. This PR corrects the check, and adds unit/fuzz tests around the storage proof checks to prevent regressions.

Fixes CLI-3344

docs: Add note about small contributions

I saw this in the foundry docs and thought it would be good to add to ours

contracts-bedrock: add TransferOnion contract

Adds the `TransferOnion` contract which can be used to batch
send tokens. The set of transfers are committed to during
contract initialization, and the token owner must approve
the `TransferOnion` contract and then anybody can unwrap
the commitment to the transfers.

The transfers are committed to with a hash onion. This is
a simple vector commitment that must be linearly unwrapped.
Each hash commits to the next hash and the very first hash
is `bytes32(0)`.

fix(specs): Use alias syntax to address long lines

Add internal certman package with mTLS certificate reload fixes for k8s volumes

op-batcher: Watch timeouts [ENG-2625]

Update bridges.md

And use it in op-batcher.

specs: Fix typo & link in withdrawals section

Remove node built in from sdk

feat(mon): Add withdrawal monitor to chain-mon

chore(op-node): Fix two typos

chore(deps): bump http-cache-semantics from 4.1.0 to 4.1.1

fix(spec): Add missing call to engine_newPayload

The batcher now queries the inbox address from the rollup node.

- also fix a captured loop variable

- Removes the ChannelSubTimeout config flag and instead uses the SubSafetyMargin
  as a #L1-block safety margin to both, the channel timeout and sequencing
  window timeout
- Remove unused flags SequencerBatchInboxAddress and ChannelTimeout as
  these values are now queried from the rollup node.