Resolve issues #453–#456: contract snapshot, pagination guide, incident templates, secrets audit

[wheval]

Summary

This PR resolves four Stellar Wave issues in a single branch: an on-chain contract data snapshot for off-chain sync (#453), an API pagination guide for integrators (#454), incident response copy-paste templates (#455), and a secrets audit checklist (#456).

Purpose / Motivation

• Add Contract Data Snapshot Function #453: Integrators and operators need a compact, versioned, read-only export of current Soroban contract state for backups and off-chain synchronization.
• Write Pagination Guide #454: Pagination behavior differs across REST routes; integrators need one reference for params, response shapes, and pitfalls.
• Create Incident Response Templates #455: On-call engineers need structured triage, update, status page, and postmortem templates with owner and action tracking fields.
• Build Secrets Audit Checklist #456: Platform teams need a repeatable secrets inventory and audit process covering runtime, CI, and deployment credentials.

Changes Made

• Add Contract Data Snapshot Function #453: Completed contracts/soroban/src/state_export.rs (schema, SHA-256 hash, stable ordering); added read-only export_contract_data_snapshot() and list_asset_state_snapshots() entrypoints; unit and client tests; docs/contract-data-snapshot-format.md.
• Write Pagination Guide #454: Added docs/pagination-guide.md and linked from API docs, usage examples, and architecture docs.
• Create Incident Response Templates #455: Added docs/runbooks/incident-response-templates.md; updated runbook index, incident guide, and alerting runbook (fixed broken incident-management link).
• Build Secrets Audit Checklist #456: Added docs/secrets-audit-checklist.md; linked from rotation playbook, runbook index, deployment, security architecture, CI/CD, and release checklist.
• Restored a compilable Soroban lib.rs baseline and wired snapshot exports (HEAD had a broken impl block).

How to Test

1. Contract snapshot (Add Contract Data Snapshot Function #453)

   cd contracts/soroban && cargo check && cargo test --lib export_contract_data
   cargo test --lib state_export

   • Register two assets (e.g. EURC, USDC); call list_asset_state_snapshots() and confirm lexicographic order.
   • Call export_contract_data_snapshot() twice without state changes; state_hash must match.

2. Pagination guide (Write Pagination Guide #454)

   • Open docs/pagination-guide.md from backend/docs/API.md.
   • Spot-check GET /api/v1/alerts/history, GET /api/v1/incidents, and GET /api/v1/transactions against the endpoint table.

3. Incident templates (Create Incident Response Templates #455)

   • Open docs/runbooks/incident-response-templates.md from the runbook index and incident response guide.

4. Secrets checklist (Build Secrets Audit Checklist #456)

   • Open docs/secrets-audit-checklist.md from the secret rotation playbook.
   • Confirm docs/security-audit-checklist.md (contract audit) is unchanged.

Breaking Changes

None.

Related Issues

Closes #453
Closes #454
Closes #455
Closes #456

Checklist

• Code builds successfully
• Tests added/updated
• Documentation updated

[drips-wave]

@wheval Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits