docs: versioning clarity, measured performance guidance, and fail-closed publishing

[pixelcircuits]

Summary

• Clarify versioning across the README and book index: per-tag published books, the distinction between the docs source version, the Fuelup network channels, and the newest upstream release.
• Add measured, evidence-scoped optimization guidance: storage read-once/write-once patterns, benchmarking the executed entrypoint with forc test --release --locked and a committed Forc.lock, and honest inline-assembly expectations — wins only where asm removes fixed-loop or branch scaffolding, with an isolated typed interface and a readable Sway oracle for differential testing.
• Add predicate security-design guidance covering the transaction dimensions a predicate must bind (chain/domain, script, counts, owners/recipients/assets/amounts/net gain, nonces, validity windows, witness content).
• Align the cargo-generate Rust test templates on one fuels version matched to the SDK harness, enforced by a CI check.
• Make documentation publishing fail closed: the gh-pages workflow verifies plugin compatibility tags and only real tag pushes can move the latest redirect.

🤖 Generated with Claude Code

https://claude.ai/code/session_01NWti3Mzc7HHsy9EspKHKof

[cursor]

PR Summary

Medium Risk
Changes GitHub Pages deploy conditions and plugin install pinning, which can block or mis-publish docs if tags/inputs are wrong. Template fuels bumps affect generated test projects.

Overview
Clarifies that GitHub Pages docs versions (latest, vX.Y.Z, master) are not Fuelup channels, and that Forc plugins can version independently of the compiler.

Adds measured performance and security notes: inline asm is not automatically cheaper, storage ops should be hoisted/written once, forc test --release must hit the real path, and predicates should bind transaction dimensions rather than only returning true. Marks Sway Applications as legacy snapshots.

Aligns cargo-generate Rust templates on fuels = "0.77" and extends the SDK harness version check so new templates cannot drift. The gh-pages workflow can backfill a tag, installs plugins from in-tree or pinned Forc tags (fail-closed otherwise), and only real tag pushes update the latest redirect.

^{Reviewed by Cursor Bugbot for commit a5ef996. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 2 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 6d3d7df. Configure here.}