feat: add MevIntelligenceActionProvider for real-time Ethereum MEV data

[ValoremFoundation]

Adds MevIntelligenceActionProvider — real-time Ethereum liquidation intelligence for AI agents across Aave V3, Spark, and Morpho Blue.

Actions:

• get_liquidation_waves: near-liquidation borrowers ranked by health factor
• get_searcher_leaderboard: MEV searchers ranked by landed fires
• get_builder_recommendation: optimal block builder for bundle routing
• get_mev_feed: enriched MEV event stream

Free preview tier requires no API key. Paid x402 tier uses USDC micropayments on Base (eip155:8453) — natively compatible with CDP wallet infrastructure.

Addresses WISHLIST.md: '[ ] Aave integration' under DeFi Actions > Lending. Follows DefiLlamaActionProvider pattern: external HTTP fetch, no wallet required, supportsNetwork = () => true.

Description

Tests

Checklist

A couple of things to include in your PR for completeness:

• Added documentation to all relevant README.md files
• Added a changelog entry

[cb-heimdall]

🟡 Heimdall Review Status

Requirement	Status	More Info
Reviews	🟡 0/1	Denominator calculation Show calculation 1 if user is bot 0 1 if user is external 0 2 if repo is sensitive 0 From .codeflow.yml 1 Additional review requirements Show calculation Max 0 0 From CODEOWNERS 0 Global minimum 0 Max 1 1 1 if commit is unverified 1 Sum 2

[ValoremFoundation]

Hi @murrlincoln — friendly bump for review on this one when you have a moment 🙏

A few things worth noting:

Heimdall blockers addressed:

• Force-pushed feat/mev-intelligence-action-provider with both commits SSH-signed (head is now 40aea91). GitHub may show "Unverified" briefly until I register the signing key in account settings — should clear shortly.
• CI is green: labeler ✓ and StepSecurity ✓.

Live endpoint context (in case it helps the review):

• The action provider talks to a live MCP server at https://mev.advalorem.io/mcp (9 tools, Streamable HTTP transport).
• Server card: https://mev.advalorem.io/.well-known/mcp/server-card.json
• I ran a standalone MCP client smoke test against the live endpoint — 8/8 pass (initialize, tools/list, 4 tool calls, GET /mcp, server-card fetch). Happy to share the test script if useful.
• Auth model is x402 USDC on Base (pay-per-call), so most tool calls are free to inspect via tools/list without auth.

Pattern mirrors recently merged action providers (#930 erc-8004, #982 dTelecom): schemas + provider class + README + CHANGELOG + index.ts wiring. Diff is +362 / -0 across 7 files, scoped to typescript/agentkit/src/action-providers/mev-intelligence/.

Happy to address any feedback. Thanks!