The sequencer drift was larger than the sequencing window. This can cause reorgs. To fix I reduced the drift to 10s, which is lower than the 45 second sequencing window specified via the L1 block time and the window size.

Add internal certman package with mTLS certificate reload fixes for k8s volumes

op-batcher: Watch timeouts [ENG-2625]

Update bridges.md

And use it in op-batcher.

specs: Fix typo & link in withdrawals section

Remove node built in from sdk

feat(mon): Add withdrawal monitor to chain-mon

chore(op-node): Fix two typos

chore(deps): bump http-cache-semantics from 4.1.0 to 4.1.1

fix(spec): Add missing call to engine_newPayload

The batcher now queries the inbox address from the rollup node.

- also fix a captured loop variable

- Removes the ChannelSubTimeout config flag and instead uses the SubSafetyMargin
  as a #L1-block safety margin to both, the channel timeout and sequencing
  window timeout
- Remove unused flags SequencerBatchInboxAddress and ChannelTimeout as
  these values are now queried from the rollup node.

This avoids having to provide rollup configuration as flags to the
batcher; also avoids possible inconsistencies.

We need to access the batch data directly in the batcher when tracking
the sequencer window. For that reason, export BlockToBatch to be able to
create the batch from a block there and then add it to ChannelOut without
converting twice.

and improve other code docs. It was confusing that AddL2Block adds a
block to the queue whereas addBlocks processed them, thereby removing
them from the queue. So renamed to `processBlocks`.