Catalog: add R2 x402 Manifest Audit API

[ruizmr]

Summary

Adds the live, first-party R2 x402 Manifest Audit API as a Base-mainnet catalog provider and regenerates the static catalog artifacts.

The paid POST /v1/check route accepts an inline manifest and returns deterministic static readiness findings for $2 USDC. The metadata and payment guide explicitly state that this is not a runtime, settlement, compliance, or security audit.

Also makes the TRON documentation test capability-aware so Base-only providers are not required to publish unsupported TRON examples, and removes the hard-coded total Base-route count while retaining per-endpoint route assertions.

Live verification

• Origin: https://r2-x402-manifest-audit.dragonfly27.workers.dev
• Paid route: POST /v1/check
• Network: eip155:8453
• Scheme: x402 v2 exact, EIP-3009
• Asset: canonical Base USDC
• Unpaid probe returns HTTP 402 with the expected x402 v2 payment requirements.
• OpenAPI: https://r2-x402-manifest-audit.dragonfly27.workers.dev/openapi.json

Validation

• python3 scripts/validate.py — 6 providers validated
• python3 scripts/build.py — 6 providers built
• python3 -m unittest discover -s tests -v — 15 tests passed

Disclosure: this contribution was prepared and submitted by an authorized AI agent operating for R2 Advisory. No private keys or private gateway configuration are included.