chore(ci): optimize workflow performance with caching and path filters

[DBosley]

Summary

Comprehensive CI optimization to reduce build times and eliminate redundant work across all workflows.

Key Optimizations

Optimization	Impact
Runner Migration	Eliminates 10-20min queue times (Solana jobs → ubuntu-latest)
Anchor Base Image	~6 min savings per CLI build (pre-compiled Anchor 0.29.0)
CLI Build Deduplication	Build once, test in parallel (was building twice)
Docker Layer Caching	~10-15 min savings on cached runs
Tilt Images	Pre-built images with registry-based caching
Parallel Solana Builds	v1.0.0 and v2.0.0 build in parallel with GHA caching
Path Filtering	Skip irrelevant CI entirely
Job Parallelization	Lint jobs run parallel with builds
Concurrency Controls	Cancel in-progress runs on new commits

Results

Workflow	Before	After
CLI (cached)	~20-30 min	~5 min (build once, test parallel)
CLI test-evm	~6 min	~1-2 min (cached layers)
CLI test-solana	~12 min (serial builds)	~5s cached / ~6 min parallel
Solana SBF	10-20 min queue + 15 min	~12 min (no queue)
Solana Lint	Blocked by SBF	~40s (parallel on ubuntu)
EVM	~6 min	~4 min (parallel lint)
Unrelated PRs	All CI runs	Skipped via path filters

Architecture

CLI Workflow:
  anchor-base (reusable workflow)
    │ builds/caches anchor 0.29.0 image
    v
  build (ubuntu-latest)
    │ builds cli-local, pushes to ghcr.io
    ├── test-evm (ubuntu-latest, parallel, cached)
    │     pulls cli-local (cached), adds test layer, runs
    ├── build-solana-v1 (ubuntu-latest, parallel, GHA cached)
    │     restores cache OR builds v1.0.0 with fixed program ID
    ├── build-solana-v2 (ubuntu-latest, parallel, GHA cached)
    │     restores cache OR builds v2.0.0 with fixed program ID
    └── test-solana (ubuntu-latest, needs build-solana-v1/v2)
          downloads artifacts, uses --binary flag to skip rebuilding

Tilt Images Workflow:
  build-solana (ubuntu-latest) ─────────────────┐
    │ target: builder (full image, ~2GB)        │
    │ cache: registry :buildcache tag           ├── parallel
  build-evm (ubuntu-latest) ────────────────────┘
    │ target: foundry-export (FROM scratch, ~20MB)
    │ cache: registry :buildcache tag

Solana Workflow:
  lint (ubuntu-latest) ──────────────────┐
  solana-sbf (ubuntu-latest) ────────────┼── all parallel
  anchor-test (ubuntu-latest) ───────────┤
  check-version (ubuntu-latest) ─────────┘

EVM Workflow:
  lint (ubuntu-latest) ──────────────────┐
  test (ubuntu-latest) ──────────────────┼── all parallel
  echidna (ubuntu-latest) ───────────────┘

Files Changed

New Files:

• Dockerfile.anchor-base - Pre-compiles Anchor 0.29.0
• Dockerfile.cli-test-evm - Thin test layer for EVM
• Dockerfile.cli-test-solana - Thin test layer for Solana
• .github/workflows/anchor-base.yml - Reusable workflow for anchor-base image
• .github/workflows/tilt-images.yml - Pre-builds Solana/EVM contract images
• cli/test/build-solana-v1.sh - Builds v1.0.0 with fixed test program ID
• cli/test/build-solana-v2.sh - Builds v2.0.0 with fixed test program ID

Modified:

• Dockerfile.cli - Uses pre-built anchor binaries, copies avm wrapper
• .github/workflows/cli.yml - Registry-based build sharing, anchor-base integration, parallel Solana builds with GHA caching
• .github/workflows/tilt.yml - Path filters, ghcr.io login for cache
• .github/workflows/evm.yml - Path filters, parallel lint, concurrency
• .github/workflows/solana.yml - ubuntu-latest, parallel tests, concurrency, SBF cache validation
• .github/workflows/sdk.yml - Path filters, concurrency
• .github/workflows/prettier.yml - Path filters, concurrency
• Tiltfile - Target builder stage, cache_from for registry caching
• cli/test/solana.sh - Uses pre-built artifacts via --binary flag when available
• sdk/__tests__/utils.ts - Fixed infinite loop in waitForRelay(), serialized peer registration

Bug Fixes

1. SDK flaky tests (waitForRelay): Fixed infinite loop in waitForRelay() that caused tests to hang. Added maxRetries parameter (default 60 attempts / 2 minutes).

2. SDK nonce collisions (Tilt CI): Fixed NONCE_EXPIRED errors in Tilt CI tests. The link() function was registering peers in parallel using Promise.all. When EVM chains share the same signer, concurrent transactions cause nonce collisions. Changed to sequential for...of loop.

3. Anchor version mismatch: Fixed avm wrapper not being copied from anchor-base. The backpackapp base image ships anchor 0.30.1, and we need to overwrite it with the avm wrapper that delegates to 0.29.0.

4. Program ID mismatch: Pre-built Solana binaries have program IDs baked in at compile time. Build scripts now patch Anchor.toml and lib.rs with a fixed test program ID before building, and solana.sh uses the corresponding keypair from artifacts.

5. Tilt image target: Changed Solana Tilt image from export (scratch) back to builder target. The Dockerfile.test-validator uses COPY --from=ntt-solana-contract and requires the full builder filesystem, not a minimal scratch image.

6. SBF cache validation: Fixed empty cache causing test failures. actions/cache@v4 was caching an empty directory (200 bytes) because it saves/restores in the same step. Split into actions/cache/restore@v4 + verification step + actions/cache/save@v4 to ensure we only skip builds when cache contains actual .so files.

[dvgui]

LGTM. One test (tilt) seems to still be failing.