fix(contract): bound withStateRestore retries and handle re-archival

[Smoothjane]

Problem

withStateRestore in src/lib/contract.ts caught a StateArchivedError, restored the footprint, and then called run() a second time outside any try:

await restoreArchivedState(err);
return run(); // unguarded

If the entries were archived again before the retry finished (a race under load), the second StateArchivedError escaped with no handling. Callers (invokeBuyPolicy, invokeSubmitClaim, DepositModal, WithdrawModal) then got a raw archival error carrying a stale restoreXdr, and there was no explicit limit on how many restore rounds could happen.

Changes

src/lib/contract.ts

• The single unguarded retry is replaced by a bounded restore/retry loop.
• New optional StateRestoreOptions argument:
  • maxRestores (default 1, the same number of restores as before): the most restore rounds, and so the most extra signature prompts, the user will see.
  • restore: the restore implementation, defaulting to restoreArchivedState. It is injectable so the retry logic can be unit-tested without a live RPC.
• Once the limit is reached, a re-archived call throws a plain ContractError: "Contract data was archived again after being restored. Please try again in a moment." The last StateArchivedError is kept in details for debugging, and toUserMessage already logs details without showing it to the user.
• Non-archival errors and restore failures (e.g. the user rejecting the restore signature) are passed through exactly as before, without a retry.
• Existing call sites need no changes: the new parameter is optional.

src/lib/__tests__/contract.test.ts

New withStateRestore() retry limit (#536) suite:

• a restore followed by a successful retry returns the result (1 restore, 2 runs);
• re-archival after the restore gives a ContractError, not a StateArchivedError, with the original error in details;
• maxRestores: 2 caps the restores at exactly 2 (3 runs);
• a failed restore is propagated and the operation is not retried.

Verification

• npx vitest run src/lib/__tests__/contract.test.ts: 33/33 pass.
• tsc --noEmit reports no errors in the touched files.
  Closes [security] withStateRestore retries once but does not limit retry depth #536
  Closes [perf] Policies page fetches all policies client-side, no server-side pagination #537
  Closes [bug] ConnectWalletPrompt shows stale stored address after wallet disconnect #538
  Closes [bug] Dashboard recent claims table missing mobile layout #539

[drips-wave]

@Smoothjane Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

[netlify]

❌ Deploy Preview for boisterous-sunshine-dd4c4c failed.

Name	Link
🔨 Latest commit	80eb171
🔍 Latest deploy log	https://app.netlify.com/projects/boisterous-sunshine-dd4c4c/deploys/6ab42414f16dd800088c8a70