Detect Mutable Soroban Upgrade Configuration

[mijinummi]

🧠 Concept

Detect upgrade configuration that can be changed without sufficient protection.

⚠️ Problem

Attackers may manipulate upgrade configuration if administrative state is insufficiently protected.

📁 Implementation Scope

• packages/rules/soroban/upgrades/
• packages/analyzers/soroban/storage/

✅ Requirements

• Identify upgrade configuration
• Track configuration writes
• Analyze authorization
• Report unsafe mutation paths

🎯 Acceptance Criteria

• Upgrade configuration detected
• Mutation paths tracked
• Authorization analyzed
• Unsafe paths reported

[akinboyewaSamson]

Hello maintainer. I would love to work on this