Protect smart contract mutations against reentrancy

[TUPM96]

Resolves #397

Summary:

• add a storage-backed reentrancy lock around guarded contract mutations
• record reentrant attempts, pause further guarded mutations, and no-op the reentrant call path without writing project state
• add an admin emergency pause/unpause path and a security status view
• tighten escrow mutation checks for positive amounts, deadline validation, deposit overflow, and overfunding
• replace placeholder security properties with runnable pause, reentrancy, lock-release, and escrow accounting coverage
• keep honggfuzz on non-Windows targets so Rust tests run on Windows while preserving fuzz tooling elsewhere

Verification:

• cargo fmt
• cargo test (15 passed)
• cargo build
• git diff --check
• forge test not run: forge is not installed in this local PATH

[vercel]

@TUPM96 is attempting to deploy a commit to the smartdevs17's projects Team on Vercel.

A member of the Team first needs to authorize it.

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.