feat: add TokenSafetyHook and ITokenSafetyOracle

[JhiNResH]

TokenSafetyHook v2

Gates job funding when payment token is flagged as unsafe by an external oracle.

Changes from v1

Issue	Fix
Wrong FUND_SEL selector	Inherit BaseACPHook, override _preFund — no manual selector routing
Token decoded from callback data (wrong field)	Read paymentToken from getJob(jobId)
Upgradeable + provider-specific framing	Non-upgradeable, aligned with base hook style

How it works

1. fund(jobId, ...) triggers beforeAction → _preFund
2. Read job.paymentToken from AgenticCommerce.getJob(jobId)
3. If whitelisted → pass through
4. Else query ITokenSafetyOracle → if verdict is blocked → revert

Files

File	What
contracts/hooks/TokenSafetyHook.sol	Hook implementation (~130 lines)
contracts/interfaces/ITokenSafetyOracle.sol	Oracle interface (vendor-agnostic)
test/TokenSafetyHook.t.sol	9 tests

Test plan

• forge test --match-contract TokenSafetyHookTest — 9/9 pass
• Review: _preFund reads token from job state, not callback data
• Review: whitelist bypass, blocked verdict bitmask, admin access

[psmiratisu]

@JhiNResH before i do some audit on the hook. Could i suggest some key things to fix ?

• the fund selector needs to match the real current signature
  the token source should come from the actual job state or a clearly defined param path rather than from a decode path that can read the wrong value

it would be better to align this with the shared hook pattern and keep the implementation as close as possible to the base example style, and please remove any remaining provider-specific framing. Once that is cleaned up, happy to review a narrower v2. I would treat this as a standalone policy hook, not something that should be bundled with router or attestation paths.

[JhiNResH]

Rewrote from scratch. All three issues fixed:

1. Selector — now inherits BaseACPHook, overrides _preFund only. No manual selector routing.
2. Token source — reads paymentToken from AgenticCommerce.getJob(jobId), not from callback data.
3. Style — non-upgradeable, removed Maiat-specific framing, standalone policy hook.

9 tests cover: safe token pass, honeypot revert, whitelist bypass, no-token skip, blocked verdict mask, admin access, batch whitelist.

Force-pushed — clean single commit on top of current main.