Extend op-reth's EvmConfig with the post-exec hooks the new
OpBlockExecutor expects. Downstream uses:

- The payload builder asks the executor to Produce + drains refund
  entries via post_exec_executor_for_block + take_post_exec_entries.
- The replay RPC asks for the same Produce mode but on a stripped
  block (0x7D removed) to compare synthesized refunds against the
  embedded payload.

OpEvm auto-wires the SDMWarmingInspector begin/take hooks so callers
don't have to plumb them manually; the alloy-op-evm debug_assert
guards the failure mode if a downstream fork bypasses OpEvm.

Append a type-0x7D post-exec transaction at the tail of the block
when the sequencer builds under --rollup.sdm-enabled. The tx carries
the executor's accumulated refund entries as its RLP payload and
canonicalizes this node's gas accounting with what a verifier will
later independently replay.

- OpBuilderConfig/CLI flag (`--rollup.sdm-enabled`) — off by default.
  When off, the payload path is byte-identical to the pre-feature code.
- try_include_post_exec_tx wraps the executor's refund entries in a
  TxPostExec, executes it, and aborts the payload build with
  PayloadBuilderError::EvmExecutionError on any synthetic-tx
  execution failure. Silently dropping it would yield a payload that
  no honest verifier can reproduce.
- Unit tests pin the abort path (should-not-be-Ok-on-failure), the
  no-entries skip, and the happy-path wrapping of entries.
- custom-node example switches to NoopPayloadServiceBuilder; the
  upstream OpPayloadBuilder is now specialized for OpTransactionSigned
  to carry the post-exec tx and no longer composes with the example's
  custom tx type. Doc comment explains what downstream forks need.

…tants

- Reject 0x7D txs in Disabled/Invalid modes. Previously
  `execute_transaction_without_commit` short-circuited any post-exec
  tx regardless of mode, so a follower with SDM off would silently
  accept a payload it never validates — state would diverge without
  a loud failure.
- Reject Produce-mode refunds that exceed raw gas used. An inspector
  over-attribution would otherwise saturate canonical gas to zero
  and emit an SDMGasEntry that a verifier rejects at pre-execution;
  failing the payload build here is strictly better than shipping a
  block the sequencer can't self-verify.
- Replace the 2500/2000/2100 magic numbers in SDMWarmingInspector with
  ACCOUNT_REWARM_REFUND / SLOAD_REWARM_REFUND / SSTORE_REWARM_REFUND
  and cite the EIP-2929 derivation.
- Restore `OpBuilderConfig::new(da_config, gas_limit_config)` to its
  pre-branch 2-arg signature; add `new_with_sdm` for the SDM-aware
  constructor so external callers don't break.

Tests pin:
- Disabled/Invalid modes hard-fail at `execute_transaction` time.
- Produce mode rejects a fake over-refund take-hook.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

…-struct

Collapse the six post-exec fields on OpBlockExecutor (mode, entries,
verify_entries, invalid_reason, begin_tx, take_last_tx_result) into a single
PostExecState<Evm> field. Public API (with_post_exec_*, set_post_exec_mode,
take_post_exec_entries) is preserved — callers in op-reth and the payload
builder need no changes.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

…ansaction trait

Extract the post-exec (type 0x7D) tx construction into a BuildPostExecTransaction
trait on reth-optimism-primitives and generalize OpPayloadBuilder, the debug and
witness RPCs, OpFullNodeTypes, and try_include_post_exec_tx off the hardcoded
`_TX = OpTransactionSigned` bound onto the trait. OpTransactionSigned gets the
canonical impl; the custom-node example implements the trait for its own
CustomTransaction and drops the payload-builder-breakage note from its docs.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

…ample

Implement ConfigurePostExecEvm for CustomEvmConfig and PostExecExecutorExt
for CustomBlockExecutor so the example can drive the SDM-enabled
OpPayloadBuilder path via BasicPayloadServiceBuilder. Retain RpcAddOns since
OpAddOns is hard-bound to OpPrimitives.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>