Add alpha-hardening ADRs and issue plan from pre-release audit.

Lock alpha scope, tracker auth, TOPLOC fraud verification, and deferred multi-tracker money-path work; supersede legacy fraud issues with ADR-0018.

Co-authored-by: Cursor <cursoragent@cursor.com>

.scratch/alpha-hardening/issues/19-doc-cryptography-test-env.md

@@ -0,0 +1,24 @@
+Status: ready-for-agent
+
+# 19 — DOC: Cryptography dependency + test environment note
+
+## What to build
+
+Document and verify test/dev environment setup for wallet crypto paths. `packages/node/meshnet_node/wallet.py` uses `cryptography`; failures occur when `.venv` lacks deps.
+
+**Code refs:**
+
+- `packages/node/pyproject.toml` — `cryptography>=41` (verify declared)
+- `packages/node/meshnet_node/wallet.py`
+- Handoff: tests fail without `cryptography`, `openai`, `langchain` in `.venv`
+
+## Acceptance criteria
+
+- [ ] Confirm `cryptography` in node package deps; add to root/dev extras if tests import wallet without node install
+- [ ] Add short **Test environment** section to `CONTRIBUTING.md` or `docs/dev/test-env.md`: use `.venv/Scripts/python.exe`, `pip install -e packages/node ...`, optional dep skips
+- [ ] Note which tests require optional deps (`--ignore=test_openai_gateway,...`)
+- [ ] No unrelated production code changes
+
+## Blocked by
+
+None