trip-wire

fix: update status message in ActiveOrders component to reflect live syncing with L1 and ER

chore: add @types/bun so bun:test typechecks under tsc

docs: record the hardening pass; fix README (cancel, tests, deleted program.ts), flag stale PROJECT sketch

test(pyth): lock TS<->Rust parser byte-compatibility; fix anchor:build script

chore(config): security headers, blank-env robustness, honest metadata, RPC exposure docs