feat(sol): add agave-backed dlob hot path for canary

environments/sol/trade-r001-canary/scripts/create-trade-dlob-rpc-secret.sh

@@ -0,0 +1,25 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+TARGET_HOST="${TARGET_HOST:-mevnode}"
+TARGET_NAMESPACE="${TARGET_NAMESPACE:-trade-r001-canary}"
+
+RPC_URL="${RPC_URL:-http://agave-rpc-host.trade-infra.svc.cluster.local:8899}"
+WS_URL="${WS_URL:-ws://agave-ws-host.trade-infra.svc.cluster.local:8900}"
+GRPC_URL="${GRPC_URL:-http://agave-grpc-host.trade-infra.svc.cluster.local:10000}"
+
+ssh_target() {
+  ssh -o StrictHostKeyChecking=no "$TARGET_HOST" "$@"
+}
+
+TOKEN="$(ssh_target 'sudo cat /etc/agave/geyser.x_token')"
+
+ssh_target "sudo k3s kubectl get ns ${TARGET_NAMESPACE} >/dev/null 2>&1 || sudo k3s kubectl create ns ${TARGET_NAMESPACE} >/dev/null"
+ssh_target "sudo k3s kubectl -n ${TARGET_NAMESPACE} create secret generic trade-dlob-rpc \
+  --from-literal=ENDPOINT='${RPC_URL}' \
+  --from-literal=WS_ENDPOINT='${WS_URL}' \
+  --from-literal=GRPC_ENDPOINT='${GRPC_URL}' \
+  --from-literal=TOKEN='${TOKEN}' \
+  --dry-run=client -o yaml | sudo k3s kubectl apply -f - >/dev/null"
+
+echo "Created trade-dlob-rpc in ${TARGET_NAMESPACE}"