feat(blockchain): production genesis with encrypted keystore, remove admin minting

- Introduce production setup script: scripts/setup_production.py
  - Generates aitbc1genesis (treasury) and aitbc1treasury (spending) wallets
  - Encrypts keys via AES-GCM, stores password in keystore/.password (600)
  - Creates allocations.json and genesis.json with fixed total supply
  - Sets mint_per_unit=0 (no inflation)

- Update make_genesis.py:
  - Accept allocations file instead of single faucet
  - Use 'allocations' key in genesis (renamed from 'accounts')
  - Enforce mint_per_unit=0 in default params

- Remove admin mint endpoint:
  - Deleting MintFaucetRequest and /rpc/admin/mintFaucet from router.py
  - Removes faucet CLI command from cli/aitbc_cli/commands/blockchain.py

- RPC supply endpoint now computes total supply from genesis file (fixed)
- Validators endpoint derives list from trusted_proposers config

- Config enhancements (config.py):
  - Add keystore_path and keystore_password_file
  - Change mint_per_unit default to 0
  - main.py: Auto-load proposer private key from keystore into settings.proposer_key (hex) for future use

- Launcher scripts:
  - scripts/mainnet_up.sh: Loads .env.production, derives proposer_id from keystore if needed, starts node + RPC
  - scripts/devnet_up.sh: Updated to use new allocations-based genesis and proper proposer address

- Documentation:
  - Rewrite blockchain-node/README.md for production model (no faucet, keystore management, multi-chain)
  - Update MEMORY.md with production blockchain section

- Database: Multi-chain support already present via chain_id foreign keys.

This change makes the blockchain production‑ready: immutable supply, secure key storage, and removal of dev‑only admin functions.

Co-authored-by: Andreas Michael Fleckl <andreas@example.com>

cli/aitbc_cli/commands/blockchain.py

@@ -1004,28 +1004,6 @@ def balance(ctx, address, chain_id, all_chains):
     except Exception as e:
         error(f"Network error: {e}")
 
-@blockchain.command()
-@click.option('--address', required=True, help='Wallet address')
-@click.option('--amount', type=int, default=1000, help='Amount to mint')
-@click.pass_context
-def faucet(ctx, address, amount):
-    """Mint devnet funds to an address"""
-    config = ctx.obj['config']
-    try:
-        import httpx
-        with httpx.Client() as client:
-            response = client.post(
-                f"{_get_node_endpoint(ctx)}/rpc/admin/mintFaucet",
-                json={"address": address, "amount": amount, "chain_id": "ait-devnet"},
-                timeout=5
-            )
-            if response.status_code in (200, 201):
-                output(response.json(), ctx.obj['output_format'])
-            else:
-                error(f"Failed to use faucet: {response.status_code} - {response.text}")
-    except Exception as e:
-        error(f"Network error: {e}")
-
 
 @blockchain.command()
 @click.option('--chain', required=True, help='Chain ID to verify (e.g., ait-mainnet, ait-devnet)')