feat(scripts): add --dry-run, --yes flags and WASM hash pre-flight to deploy_mainnet.sh

[devAgatha]

Summary

Adds safety flags to deploy_mainnet.sh so mistakes can be caught before hitting mainnet.

Changes

• --dry-run: prints all commands without executing any transactions
• --yes: skips the interactive confirmation prompt (for CI use)
• --expected-token-hash / --expected-gov-hash: pre-flight SHA-256 verification of WASM binaries before deployment
• Confirmation prompt still required by default when neither --yes nor --dry-run is set

Closes

Closes #87

[drips-wave]

@devAgatha Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits