Implement src/CloneFactory.sol containing the Counter implementation and CloneFactory. Do not deploy.

Workspace: the job starts from an empty tree (no foundry.toml, forge-std or OpenZeppelin) and each worker may write only the listed src files and their test/.t.sol files, so no dependency can be added. Write everything inline (pragma ^0.8.24, default forge layout, no imports beyond these files); mocks and helper contracts live inside the test files, which declare the cheatcodes they use in an inline Vm interface at the HEVM address and assert with require.

Counter: initialize(address owner) callable once, later calls revert AlreadyInitialized; the implementation's constructor marks itself initialised so nobody can initialise or use the implementation directly; increment() (owner only) and count() view.

CloneFactory: the constructor deploys one Counter implementation and stores it immutably. createCounter(bytes32 userSalt) deploys an EIP-1167 minimal proxy (the standard 45-byte runtime 363d3d373d3d3d363d735af43d82803e903d91602b57fd5bf3, assembled by hand, not imported) with CREATE2 at salt = keccak256(abi.encode(msg.sender, userSalt)), initialises it with msg.sender as owner in the same call so nobody can front-run the initialisation or take another caller's address, emits CounterCreated(owner, userSalt, clone), and reverts if the deployment fails (address already used). predict(address creator, bytes32 userSalt) view returns the address createCounter would use (CREATE2 over the clone init code hash).

Tests: predict equals the deployed address for fuzzed creators and salts; the same creator and salt twice reverts; another creator with the same userSalt gets a different address; a second initialize on a clone and any initialize on the implementation revert; clones keep separate storage and owners; the clone's runtime code is exactly the 45-byte EIP-1167 pattern for this implementation.