fix: align allowed_docker_image_hashes consumers with new return shape

The view now returns [{ image_hash, expiry_timestamp_seconds }] instead of
bare hashes. Update the launcher localnet test scripts to select by
.image_hash (they compared array elements to a hash string, which never
matches an object), and fix the return type in the contract README and the
securing-mpc design doc.

Author: barakeinav1

crates/contract/README.md

@@ -323,7 +323,7 @@ These functions require the caller to be a participant or candidate.
 | `config()`                                                                 | Returns the contract configuration.                                                                                                                                                                                                      | `&ConfigV1`              | TBD             | TBD                |
 | `version()`                                                                | Returns the contract version.                                                                                                                                                                                                            | `String`                 | TBD             | TBD                |
 | `update_config(config: ConfigV1)`                                          | Updates the contract configuration for `V1`.                                                                                                                                                                                             | `()`                     | TBD             | TBD                |
-| `allowed_docker_image_hashes()`                                            | Returns all currently allowed MPC Docker image hashes.                                                                                                                                            | `Vec<NodeImageHash>` | TBD            | TBD                |
+| `allowed_docker_image_hashes()`                                            | Returns all currently allowed MPC Docker image hashes with their eviction expiry, newest first.                                                                                                   | `Vec<AllowedMpcDockerImageHash>` | TBD            | TBD                |
 | `allowed_launcher_image_hashes()`                                          | Returns all currently allowed launcher image hashes.                                                                                                                                              | `Vec<LauncherImageHash>` | TBD             | TBD                |
 | `allowed_launcher_compose_hashes()`                                        | Returns all currently allowed launcher compose hashes (derived from launcher + MPC image pairs).                                                                                                  | `Vec<LauncherDockerComposeHash>` | TBD     | TBD                |
 | `launcher_hash_votes()`                                                    | Returns current launcher hash votes, showing each participant's vote.                                                                                                                             | `LauncherHashVotes`      | TBD             | TBD                |

docs/securing-mpc-with-tee-design-doc.md

@@ -375,7 +375,7 @@ pub struct Contract {
 
     ///Returns all whitelisted Docker image hashes that have been approved
     ///     by the DAO and verified by the TEE.
-    pub fn allowed_docker_image_hashes(&self) -> Vec<NodeImageHash>
+    pub fn allowed_docker_image_hashes(&self) -> Vec<AllowedMpcDockerImageHash>
 
     /// Verifies if all current participants have an accepted TEE state.
     /// Automatically enters a resharing, in case one or more participants do not have an accepted

localnet/tee/scripts/rust-launcher/test-hash-override.sh

@@ -66,7 +66,7 @@ test_override() {
   # Verify the hash is in the approved list
   local approved
   approved="$(near_call_ro allowed_docker_image_hashes '{}' | extract_json_ro)"
-  if ! echo "$approved" | jq -e --arg h "$override_hash" '.[] | select(. == $h)' >/dev/null 2>&1; then
+  if ! echo "$approved" | jq -e --arg h "$override_hash" '.[] | select(.image_hash == $h)' >/dev/null 2>&1; then
     err "Hash $override_hash is NOT in the approved list. Cannot test override."
     echo "$approved"
     return 1

localnet/tee/scripts/rust-launcher/test-verify-and-upgrade.sh

@@ -200,7 +200,7 @@ upgrade_cluster() {
   # Check if already approved
   local current_hashes
   current_hashes="$(near_call_ro allowed_docker_image_hashes '{}' | extract_json_ro)"
-  if echo "$current_hashes" | jq -e --arg h "$new_hash" '.[] | select(. == $h)' >/dev/null 2>&1; then
+  if echo "$current_hashes" | jq -e --arg h "$new_hash" '.[] | select(.image_hash == $h)' >/dev/null 2>&1; then
     warn "Hash $new_hash is already approved — skipping vote"
   else
     # --- 2.1 Vote for new MPC hash ---
@@ -228,7 +228,7 @@ upgrade_cluster() {
     # Verify vote succeeded
     local updated_hashes
     updated_hashes="$(near_call_ro allowed_docker_image_hashes '{}' | extract_json_ro)"
-    if echo "$updated_hashes" | jq -e --arg h "$new_hash" '.[] | select(. == $h)' >/dev/null 2>&1; then
+    if echo "$updated_hashes" | jq -e --arg h "$new_hash" '.[] | select(.image_hash == $h)' >/dev/null 2>&1; then
       pass "New hash approved on-chain: $new_hash"
     else
       fail "Hash not found in approved list after voting"