fix: address AI review findings for #706 recenterAccess removal

- DeployBase.sol: remove broken inline second recenter() (would always
  revert with 'recenter cooldown' in same Forge broadcast); replace with
  operator instructions to run the new BootstrapVWAPPhase2.s.sol script
  at least 60 s after deployment
- BootstrapVWAPPhase2.s.sol: new script for the second VWAP bootstrap
  recenter on Base mainnet deployments
- StrategyExecutor.sol: update stale docstring that still described the
  removed recenterAccess bypass; reflect permissionless model with vm.warp
- TestBase.sol: remove vestigial recenterCaller parameter from all four
  setupEnvironment* functions (parameter was silently ignored after
  setRecenterAccess was removed); update all callers across six test files
- bootstrap-common.sh: fix misleading retry recenter in
  seed_application_state() — add evm_increaseTime 61 before evm_mine so
  the recenter cooldown actually clears and the retry can succeed

All 210 tests pass.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

onchain/script/backtesting/StrategyExecutor.sol

@@ -24,9 +24,9 @@ import { console2 } from "forge-std/console2.sol";
  * notified on every block (for time-in-range) and on each successful recenter
  * (for position lifecycle and fee/IL accounting).
  *
- * Access model: StrategyExecutor must be set as recenterAccess on the LM so that
- * the cooldown and TWAP price-stability checks are bypassed in the simulation
- * (vm.warp advances simulated time, not real oracle state).
+ * Access model: recenter() is permissionless — no special access grant is required.
+ * EventReplayer advances block.timestamp via vm.warp, so the 60-second cooldown and
+ * the 300-second TWAP window pass normally during simulation.
  *
  * TODO(#319): The negligible-impact assumption means we replay historical events
  * as-is without accounting for KrAIken's own liquidity affecting swap outcomes.