Fully productionize Ledger app

[lrettig]

https://github.com/spacemeshos/app-spacemesh

Get this into the Ledger app store/Ledger Live.

Documentation is here: https://developers.ledger.com/docs/embedded-app/introduction/

• security
  • Ledger guidelines enforcer (https://developers.ledger.com/docs/embedded-app/secure-app/#requirement-note)
  • test folder with functional and unit tests
  • Functional tests must be present. They should allow APDU testing thanks to the Speculos OS emulator (or a real device). We highly recommend to use Ragger and Pytest as a testing framework if tests are written in Python.
  • fuzz testing (code present but haven't run it)
  • Clang static analyzer (https://developers.ledger.com/docs/embedded-app/secure-app/#automate-code-reviews-with-static-code-analysis)
  • static analysis based on CodeQL (https://developers.ledger.com/docs/embedded-app/secure-app/#automate-security-check-with-codeql)
  • Avoid Warnings during compilation (https://developers.ledger.com/docs/embedded-app/secure-app/#avoid-warnings-during-compilation)
• documentation (https://developers.ledger.com/docs/embedded-app/deliverables-checklist/#5--documentation)
  • Document in the App’s repository the list of the app’s APDUs and status words
• support (https://developers.ledger.com/docs/embedded-app/support-requirements/)
  • Point of Contact: URL, email address, phone number
• marketing (https://developers.ledger.com/docs/embedded-app/marketing-requirements/)