feat(scripts): deploy DKG/ECIES in service deployment; wire DKG into AddKeyperSet

Service deployment now also deploys DKGContract and ECIESKeyRegistry, so the
e2e tests can exercise the full DKG cycle against the shutterservice keyper.
AddKeyperSet (both common and gnosh) accept an optional DKG_CONTRACT_ADDRESS
env var and call setDKGContract on the new KeyperSet when provided.

Key decisions:
- Reuse the existing deployDKGContract / deployECIESKeyRegistry helpers
  (already shared with Deploy.gnosh.s.sol) instead of forking. Reads the
  same DKG_PHASE_LENGTH / DKG_LEAD_LENGTH env defaults.
- AddKeyperSet treats DKG_CONTRACT_ADDRESS as optional: if unset, no
  setDKGContract call is made. This keeps backward compatibility with
  callers that haven't been updated, and lets the keyper's eons-row code
  fall back to its config-supplied global DKG contract.

Files changed:
- script/Deploy.service.s.sol: deploys DKGContract + ECIESKeyRegistry.
- script/AddKeyperSet.s.sol, script/AddKeyperSet.gnosh.s.sol: accept
  DKG_CONTRACT_ADDRESS env var.

Notes for next iteration:
- mise-test-setup's contracts container is built from
  https://github.com/shutter-network/contracts.git#docker so these script
  changes will only reach the e2e test runs once that branch is pushed.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: jannikluhn

script/AddKeyperSet.gnosh.s.sol

@@ -41,6 +41,8 @@ contract AddKeyperSet is Script {
             keyBroadcastContractAddress
         );
 
+        address dkgContract = vm.envOr("DKG_CONTRACT_ADDRESS", address(0));
+
         address[] memory keypers = vm.envAddress("KEYPER_ADDRESSES", ",");
         uint256 threshold = vm.envUint("THRESHOLD");
         if (threshold > keypers.length) {
@@ -57,6 +59,9 @@ contract AddKeyperSet is Script {
         keyperSet.addMembers(keypers);
         keyperSet.setThreshold(uint64(threshold));
         keyperSet.setPublisher(address(eonKeyPublish));
+        if (dkgContract != address(0)) {
+            keyperSet.setDKGContract(dkgContract);
+        }
         keyperSet.setFinalized();
         console.log("keyperSet:", address(keyperSet));
         console.log("eonKeyPublish:", address(eonKeyPublish));

script/AddKeyperSet.s.sol

@@ -41,6 +41,8 @@ contract AddKeyperSet is Script {
             keyBroadcastContractAddress
         );
 
+        address dkgContract = vm.envOr("DKG_CONTRACT_ADDRESS", address(0));
+
         address[] memory keypers = vm.envAddress("KEYPER_ADDRESSES", ",");
         uint256 threshold = vm.envUint("THRESHOLD");
         if (threshold > keypers.length) {
@@ -57,6 +59,9 @@ contract AddKeyperSet is Script {
         keyperSet.addMembers(keypers);
         keyperSet.setThreshold(uint64(threshold));
         keyperSet.setPublisher(address(eonKeyPublish));
+        if (dkgContract != address(0)) {
+            keyperSet.setDKGContract(dkgContract);
+        }
         keyperSet.setFinalized();
         console.log("keyperSet:", address(keyperSet));
         console.log("eonKeyPublish:", address(eonKeyPublish));

script/Deploy.service.s.sol

@@ -2,6 +2,8 @@
 pragma solidity ^0.8.20;
 
 import "forge-std/Script.sol";
+import "../src/common/DKGContract.sol";
+import "../src/common/ECIESKeyRegistry.sol";
 import "../src/common/KeyBroadcastContract.sol";
 import "../src/common/KeyperSet.sol";
 import "../src/common/KeyperSetManager.sol";
@@ -34,6 +36,32 @@ contract Deploy is Script {
         return kbc;
     }
 
+    function deployDKGContract(
+        KeyperSetManager ksm,
+        KeyBroadcastContract kbc
+    ) public returns (DKGContract) {
+        uint64 phaseLength = uint64(vm.envOr("DKG_PHASE_LENGTH", uint256(10)));
+        uint64 dkgLeadLength = uint64(
+            vm.envOr("DKG_LEAD_LENGTH", uint256(40))
+        );
+        DKGContract dkg = new DKGContract(
+            phaseLength,
+            dkgLeadLength,
+            address(ksm),
+            address(kbc)
+        );
+        console.log("DKGContract:", address(dkg));
+        return dkg;
+    }
+
+    function deployECIESKeyRegistry(
+        KeyperSetManager ksm
+    ) public returns (ECIESKeyRegistry) {
+        ECIESKeyRegistry registry = new ECIESKeyRegistry(address(ksm));
+        console.log("ECIESKeyRegistry:", address(registry));
+        return registry;
+    }
+
     function deployRegistry() public returns (ShutterRegistry) {
         ShutterRegistry s = new ShutterRegistry();
         console.log("Registry:", address(s));
@@ -58,7 +86,9 @@ contract Deploy is Script {
         vm.startBroadcast(deployKey);
 
         KeyperSetManager ksm = deployKeyperSetManager(deployerAddress);
-        deployKeyBroadcastContract(ksm);
+        KeyBroadcastContract kbc = deployKeyBroadcastContract(ksm);
+        deployDKGContract(ksm, kbc);
+        deployECIESKeyRegistry(ksm);
         deployRegistry();
         deployEventTriggerRegistry();