CircleCI: contract checks

[syntrust]

Fixes for the following checks in packages/contracts-bedrock:

just lint
just interfaces-check-no-build
just unused-imports-check-no-build
just snapshots-check-no-build
just semgrep
just semver-lock-no-build

And a static check script based on the CircleCI main workflow config.

[qzhodl]

I’d prefer not to change the contract code unless we identify actual bugs, since we’re about to deploy to mainnet. Any thoughts?

[syntrust]

I’d prefer not to change the contract code unless we identify actual bugs, since we’re about to deploy to mainnet. Any thoughts?

Drafted and will continue to fix non-bug checks without affecting the product branch.