Add MEV execution deploy capture helper

docs/04-configuration/MEV_CONTROL_COMPLETION_PUNCHLIST.md

@@ -45,6 +45,7 @@ Status labels:
 | Real bundle signing | `partial` | Code path exists and can sign `executeArbitrage(...)` transactions, but live deployment remains blocked by missing signer key, executor contract, flash-loan provider, and V2 router config |
 | Inclusion detection | `partial` | Receipt polling path exists, but real inclusion truth still depends on real signed submission and relay acceptance |
 | Profit realization accuracy | `partial` | Analytics work, but realized PnL still depends on live submission and real inclusion outcomes |
+| Executor deployment capture | `live` | `deploy-mev-execution-contracts.sh` can deploy and capture non-secret execution addresses into a JSON artifact |
 
 ## Market / Search Coverage
 

docs/04-configuration/MEV_EXECUTION_VALUE_SOURCES_AND_READINESS.md

@@ -90,6 +90,28 @@ They should not be filled by assumption if the deployment target is expected to
 3. Actual deployment output or operator-selected venue address for `flash_loan_provider`.
 4. Canonical chain venue inventory for router addresses, then validate through the readiness script and live `/api/safety/signer`.
 
+## Auditable deployment capture
+
+The repo now includes a deployment helper that uses the existing Foundry script and captures the resulting addresses into a JSON artifact instead of relying on manual copy/paste:
+
+```bash
+bash scripts/deployment/deploy-mev-execution-contracts.sh --dry-run \
+  --rpc-url "$RPC_URL" \
+  --flash-loan-provider 0x...
+```
+
+When you are ready to broadcast:
+
+```bash
+PRIVATE_KEY=0x... \
+bash scripts/deployment/deploy-mev-execution-contracts.sh \
+  --rpc-url "$RPC_URL" \
+  --flash-loan-provider 0x... \
+  --treasury 0x...
+```
+
+This produces a JSON artifact under `reports/status/` and prints the exact non-secret config values to update next.
+
 ## Commit policy
 
 Safe to commit: