feat: slashing commitments (#1645)

**Motivation:**

We want to solve the following use cases:
- As an AVS I want to make a commitment on the address that can slash a
given operatorSet
- As an AVS I want to allow *one* address to slash an operatorSet
- As an AVS I DO NOT want to allow the admin to slash the operatorSet
via `PermissionController` actions

**Modifications:**

The slasher permissions are set and stored in the `AllocationManager`
instead of the `PermissionController`. The slasher is initially set upon
creation of the operatorSet.

New functions:
- `updateSlasher`: can set a new slasher on a
`ALLOCATION_CONFIGURATION_DELAY` blocks (17.5 days on mainnet)
- `migrateSlasher`: migrates the slasher address from the
`PermissionController` to the `AllocationManager`. Can be migrated only
once for a given operatorSet. This function will be called after the
upgrade for all operatorSets. See the script in the script folder, which
will eventually be added to the upgrade script.
- `createOperatorSet`: modified to take in a slasher address, which can
immediately slash an operatorSet. The *old* function is still available
and will be deprecated in Q2 2026. The *old* function automatically the
slasher to the avs address.

Old Functions:
- `slashOperator` is modified to not use the `checkCanCall` modifier

We have 1.9KB left in the ALM. 

**Result:**

Stronger commitments.

---------

Co-authored-by: Nadir Akhtar <[email protected]>

Author: ypatil12

.github/workflows/foundry.yml

@@ -193,7 +193,7 @@ jobs:
           FOUNDRY_PROFILE=coverage \
           FOUNDRY_CACHE=true \
           FOUNDRY_CACHE_PATH=cache \
-          forge coverage --report lcov --report summary --no-match-coverage "script|test" -j $(nproc)
+          forge coverage --report lcov --report summary --no-match-coverage "script|test" -j $(nproc)  --no-match-test test_noCoverage
           genhtml -q -o report ./lcov.info
 
       # Upload coverage report as artifact before potential failure

.github/workflows/validate-deployment-scripts.yml

@@ -31,7 +31,7 @@ jobs:
           submodules: recursive
 
       - name: Install Zeus
-        run: npm install -g @layr-labs/zeus
+        run: npm install -g @layr-labs/zeus --ignore-scripts
 
         # Restore Forge cache
       - name: Cache Forge Build