Make deployment output atomic and network-specific

[jxsonyx]

deploy.sh writes one deployed_contracts.json directly, which can leave partial or ambiguous state after a failed deployment.

Acceptance criteria:

• Write to a temporary file and replace only after complete success.
• Include network passphrase, source account, and contract IDs without secrets.
• Support distinct local and testnet output files.