Revoke deployer FeeJuice minter on handover

[AztecBot]

Summary

Fresh test-network FeeJuice deployments left the deployer as a TestERC20 minter after token ownership moved to CoinIssuer and CoinIssuer ownership moved onward. That retained minter role could mint outside the CoinIssuer cap with no post-handover revocation path.

Fix

• Remove the deployer FeeJuice minter role before transferring FeeJuice ownership to CoinIssuer in DeployAztecL1Contracts.
• Assert both that the deployer is no longer a FeeJuice minter and that CoinIssuer remains a minter after handover.

Testing

• forge test --match-path test/script/DeployAztecL1Contracts.t.sol (used local ignored generated/HonkVerifier.sol copied from src/mock/coverage/generated/HonkVerifier.sol; bootstrap.sh build_verifier could not find noir-protocol-circuits/target/keys/rollup_root_verifier.sol in this workspace)
• git diff --check

Issues

• Closes AztecProtocol/aztec-claude#595 — CoinIssuer handover leaves deployer with unrevocable FeeJuice minter cap bypass.

---

Created by claudebox · group: l1-audit-remediation