* add script that checks that proxied (non predeploy) contracts call `_disableInitializers` in their constructor

* add check that all initialize functions of proxied contracts (not predeploys) have the external and initializer modifiers

* add to ctb justfile but not in `just check` yet

* fixes

* use semgrep instead

* ...

* fixes

* fixes

* fixes

* fixes

* fixes

* fix comment on semgrep test

* fix semgrep test

* rename rule

* rename rule

* add exception