feat: add Punk Town skill

[panikadak]

Summary

Adds the complete Punk Town skill for Bankr under the punktown catalog slug, published by Bario Entertainment System.

The skill lets an authenticated Bankr EVM wallet operate the live Punk Town deployment on Base: acquire an exact missing BAES shortfall from supported assets, buy or sell the current Bario Punk desk inventory, join and manage Crew tiers, exit positions, settle and claim stock rewards, run permissionless stock conversions, and perform supported public maintenance and top-up calls.

Natural onboarding handles the request to buy a Bario Punk and join Punk Town as a safe state machine: it verifies the live FIFO head, obtains confirmation for bounded BAES acquisition and purchase terms, proves NFT ownership after the buy, and only then asks the user to choose a separate non-refundable Crew tier.

Safety properties

• Pins the Base deployment, runtime code hashes, peer wiring, fee route, EntryPoint, Kernel implementation, and signing allowlist.
• Emits at most one unsigned transaction per planning step; Bankr remains the signer and broadcaster.
• Uses exact ERC-20 approvals and token-specific ERC-721 approvals.
• Simulates actions, binds calldata to the confirmed economic plan, and requires receipt, event, and fresh postcondition proofs before reporting success.
• Supports direct and reviewed Bankr EIP-7702 / EntryPoint execution envelopes and rejects batches, delegate/try modes, paymasters, unknown validators, or ambiguous outcomes.
• Excludes owner-only configuration, recovery, roster, pause, governance, role, multisig, timelock, and upgrade operations.

Validation

• Node syntax checks: passed.
• Offline policy, ABI, calldata, envelope, and resource tests: 275/275 passed.
• Live Base deployment and Bankr execution fixture checks: 314/314 passed.
• Catalog schema/path assertions and JSON parsing: passed.
• Resource size/path gates: passed.
• Secret scan: no secret; the sole generic scanner match is the intentional public BAES contract address in deployment.json.
• Canonical source CI is green at source commit 902e1d2: https://github.com/panikadak/punktown-bankr-skill/actions/runs/33006922554

Canonical standalone source: https://github.com/panikadak/punktown-bankr-skill

[panikadak]

Live test update: I tested the Punk Town skill publicly with @BankrBot on X using a real Bankr wallet flow. It worked exactly as intended, and Bankr followed the skill cleanly throughout the interaction.

This provides additional public, real-world validation alongside the automated and live Base checks included in this PR.

Test: https://x.com/BaseBario/status/2093027124147888251