Implement scoped emergency pause recovery

[edehvictor]

Summary

Add an emergency pause flow that can stop only selected payroll actions while allowing safe recovery actions to continue.

Why This Matters

A global pause can trap funds or block cleanup, so maintainers need more precise safety controls during incidents.

Suggested Files

• contracts/src/pause.rs
• contracts/src/access.rs
• contracts/src/payroll.rs
• contracts/tests/scoped_pause.rs

Tasks

• Define pause scopes for funding, approval, execution, audit, and archival actions.
• Allow authorized emergency roles to activate and clear scoped pauses.
• Permit safe recovery actions while risky scopes are paused.
• Add tests for each pause scope.

Acceptance Criteria

• Paused scopes block only their intended actions.
• Recovery actions remain available when safe.
• Unauthorized pause changes are rejected.
• Tests cover activation, clearance, and scoped behavior.

Coordination

Join the Telegram channel for proper coordination: https://t.me/zkpayroll

[shobhamerabacha-star]

Hello @maintainers,

I would like to resolve this issue. Here is my proposed execution plan:

• Implementation: Implement Implement scoped emergency pause recovery with explicit require_auth checks, clean storage layouts, and robust Soroban contract logic.
• Testing & Verification: Add comprehensive unit tests verifying both happy-path invocations and unauthorized revert scenarios.
• Delivery: Ready to ship a thoroughly tested PR within 12–24 hours with passing CI.

I am ready to start immediately—please assign this to me!