Write contracts/docs/concepts-upgrades.md centred on token_transfer's upgrade(env, new_wasm_hash): who may call it, how a new WASM hash is produced and verified, and the storage-compatibility rules that make an upgrade safe.
Acceptance criteria:
- Documents the authorization required to upgrade and the consequence of that key being compromised
- Gives the end-to-end procedure: build, hash, verify, invoke, confirm
- Documents storage-layout compatibility rules — which changes are safe across an upgrade and which corrupt existing state
- States which contracts are upgradeable and which are not
Write
contracts/docs/concepts-upgrades.mdcentred ontoken_transfer'supgrade(env, new_wasm_hash): who may call it, how a new WASM hash is produced and verified, and the storage-compatibility rules that make an upgrade safe.Acceptance criteria: