config: drop inherited fs_permissions on ./meta, refresh .gas-snapshot

Nothing here is rain-meta aware and there is no ./meta directory: the only
filesystem access this repo needs is BuildPointers reading foundry.toml and
writing src/.

.gas-snapshot still described rain.factory's pre-0.1.5 clone() suite —
CloneFactoryCloneTest and its six tests do not exist in this repo, and the
tagged-constants suite was missing. Regenerated over the offline suites.

The package-release comment pointed at a generated DEPLOY_TAG; this repo
generates none, its release artifact is the src/generated/<tag>/ snapshot.

Author: thedavidmeister

.gas-snapshot

@@ -1,8 +1,15 @@
-CloneFactoryCloneTest:testCloneBytecode(bytes) (runs: 2048, μ: 350833, ~: 341941)
-CloneFactoryCloneTest:testCloneInitializeData(bytes) (runs: 2048, μ: 355388, ~: 346399)
-CloneFactoryCloneTest:testCloneInitializeEvent(bytes) (runs: 2048, μ: 356010, ~: 347118)
-CloneFactoryCloneTest:testCloneInitializeFailureFails(bytes32) (runs: 2048, μ: 159643, ~: 159643)
-CloneFactoryCloneTest:testCloneUninitializableFails(address,bytes) (runs: 2048, μ: 9882, ~: 9844)
-CloneFactoryCloneTest:testZeroImplementationCodeSizeError(address,bytes) (runs: 2048, μ: 10539, ~: 10557)
-LibCloneFactoryDeployTest:testDeployAddress() (gas: 242794)
-LibCloneFactoryDeployTest:testExpectedCodeHash() (gas: 235395)
+CloneFactoryCloneDeterministicTest:testCloneDeterministicEvent(bytes32,bytes) (runs: 2048, μ: 421457, ~: 371564)
+CloneFactoryCloneDeterministicTest:testCloneDeterministicInitializeFailureFails(bytes32,bytes32) (runs: 2048, μ: 161266, ~: 161266)
+CloneFactoryCloneDeterministicTest:testCloneDeterministicManyClonesPerImpl(bytes32,bytes32,bytes) (runs: 2048, μ: 569724, ~: 482275)
+CloneFactoryCloneDeterministicTest:testCloneDeterministicMatchesPredict(bytes32,bytes) (runs: 2048, μ: 423089, ~: 372826)
+CloneFactoryCloneDeterministicTest:testCloneDeterministicSaltIsAbiEncodeHash(address,bytes32,address) (runs: 2048, μ: 4686, ~: 4686)
+CloneFactoryCloneDeterministicTest:testCloneDeterministicSenderScoped(bytes32,bytes,address,address) (runs: 2048, μ: 585442, ~: 485815)
+CloneFactoryCloneDeterministicTest:testCloneDeterministicZeroImplementationCodeSize(address,bytes,bytes32) (runs: 2048, μ: 10699, ~: 10678)
+LibCloneFactoryDeployTaggedConstantsTest:testCloneFactory_0_1_3_CreationDeploysToPinnedAddress() (gas: 240145)
+LibCloneFactoryDeployTaggedConstantsTest:testCloneFactory_0_1_3_RuntimeHashesToBytecodeHash() (gas: 755)
+LibCloneFactoryDeployTaggedConstantsTest:testCloneFactory_0_1_4_CreationDeploysToPinnedAddress() (gas: 240146)
+LibCloneFactoryDeployTaggedConstantsTest:testCloneFactory_0_1_4_RuntimeHashesToBytecodeHash() (gas: 755)
+LibCloneFactoryDeployTaggedConstantsTest:testCloneFactory_0_1_5_CreationDeploysToPinnedAddress() (gas: 316590)
+LibCloneFactoryDeployTaggedConstantsTest:testCloneFactory_0_1_5_RuntimeHashesToBytecodeHash() (gas: 922)
+LibCloneFactoryDeployTest:testDeployAddress() (gas: 315988)
+LibCloneFactoryDeployTest:testExpectedCodeHash() (gas: 311566)

.github/workflows/package-release.yaml

@@ -4,7 +4,7 @@ name: Package Release
 # publishes rain-factory-deploy to Soldeer, and commits the frozen snapshot back
 # to main. The on-chain deploy is separate and manual (rainix-manual-sol-artifacts
 # dispatch), run before tagging. Nothing publishes on merge, so [package].version
-# and the generated DEPLOY_TAG only ever move together.
+# and the frozen src/generated/<tag>/ snapshot it names only ever move together.
 on:
   push:
     tags:

foundry.toml

@@ -18,12 +18,10 @@ evm_version = "cancun"
 bytecode_hash = "none"
 cbor_metadata = false
 
-# Build metadata used for testing rain meta aware contracts in this folder rather
-# than expose ffi to forge.
+# BuildPointers reads the version from foundry.toml and writes the generated
+# per-tag snapshots + the current-pin lib under src/. Nothing else in this repo
+# touches the filesystem.
 fs_permissions = [
-  { access = "read", path = "./meta" },
-  # BuildPointers reads the version from foundry.toml and writes the generated
-  # per-tag snapshots + the current-pin lib under src/.
   { access = "read", path = "./foundry.toml" },
   { access = "read-write", path = "./src" },
 ]