Move TEE cluster deploy/test scripts from mpc to mpc-private

[barakeinav1]

Background

The TEE cluster deploy/test scripts under localnet/tee/scripts/rust-launcher/ (deploy-tee-cluster.sh and the test-* / env / sweep scripts) are large, were never formally reviewed, and change often. Keeping them in the public mpc repo means every tweak needs full mpc review. Move them to the internal near/mpc-private repo (tools/tee-cluster/) so this ops/testing tooling can evolve with lighter review. They already drive the mpc build + deployment, so they run against a local mpc checkout via MPC_REPO_ROOT.

User Story

As an MPC developer, I want the cluster ops/test scripts in mpc-private so I can iterate on them without full mpc-repo review, while the shared infra and test-asset generation stay in mpc.

Acceptance Criteria

• Move deploy-tee-cluster.sh, set-localnet-env.sh, set-testnet-env.sh, create-and-sweep-to-treasury.sh, test-migration.sh, test-verify-and-upgrade.sh, test-hash-override.sh + how-to docs to mpc-private tools/tee-cluster/ (near/mpc-private#495).
• Keep in mpc: single-node.sh (+readme, it generates the Rust test fixtures), common.sh, and the node.*.tpl templates — referenced by the moved scripts via MPC_REPO_ROOT.
• Remove the moved files from mpc and repoint the testnet setup guide + trim the rust-launcher README (this PR).
• Moved scripts run from mpc-private against a local mpc checkout (MPC_REPO_ROOT).

Resources

• Companion PR: near/mpc-private#495
• Replaces test(localnet): deploy + vote the tee-verifier in the cluster script #3888; related update Localnet TEE cluster scripts to cover the tee-verifier contract #3887 (verifier coverage/gas finding), Wire async TEE attestation verification through the verifier contract and drop dcap-qvl from mpc-contract #3642 / feat(contract): async TEE attestation verification, drop dcap-qvl #3714 / test(contract): sandbox coverage + stub verifier for async attestation #3715.