avoid confusion in README.md

[bap2pecs]

there is

trustedAggregatorTimeout: uint64, If a sequence is not verified in this timeout everyone can verify it

so it's confusing if we don't mention that pendingStateTimeout means everyone can consolidate it after this timeout because for trusted aggregator, it doesn't need to honor this timeout:

    function consolidatePendingState(
        uint32 rollupID,
        uint64 pendingStateNum
    ) external {
        RollupData storage rollup = rollupIDToRollupData[rollupID];
        // Check if pending state can be consolidated
        // If trusted aggregator is the sender, do not check the timeout or the emergency state
        if (!hasRole(_TRUSTED_AGGREGATOR_ROLE, msg.sender)) {
            if (isEmergencyState) {
                revert OnlyNotEmergencyState();
            }

            if (!_isPendingStateConsolidable(rollup, pendingStateNum)) {
                revert PendingStateNotConsolidable();
            }
        }
        _consolidatePendingState(rollup, pendingStateNum);
    }

[invocamanman]

Hey!
Pls make all the PRs, on develop, since will be the next "main" branch in short term.

I though it was implied, but ye is more consistent with the comment above ^^

[bap2pecs]

@invocamanman just updated!

[sonarcloud]

Quality Gate failed

Failed conditions
15 Security Hotspots
21.3% Duplication on New Code (required ≤ 20%)
C Reliability Rating on New Code (required ≥ A)

See analysis details on SonarCloud

Catch issues before they fail your Quality Gate with our IDE extension SonarLint