program-runtime: harden native_invoke to take signer seeds

[buffalojoec]

Problem

native_invoke takes signers: &[Pubkey], letting any builtin silently vouch for arbitrary addresses as CPI signers. This is a dangerous footgun for anyone who assumes native_invoke builtin CPI dispatch is safe like invoke_signed is for SBPF.

This function originally accepted PDA seeds and performed CPI signer validation internally, rather than leaving it up to the caller.
https://github.com/solana-labs/solana/blob/9e90394583b7791b6d7b3b5e6623c598579078b3/runtime/src/message_processor.rs#L593-L599

Subsequent refactoring changed this to accept a slice of public keys and shifted the onus for CPI signer validation onto the caller program.
PR | Diff | File view

CPI dispatch for builtin programs should not deviate from SBPF dispatch and put the signer onus on the caller programs, but instead should match SBPF CPI dispatch.

Summary of Changes

Return to the original argument for accepting PDA seeds and add documentation, so it's crystal clear what this function is for and how to use it.

Also adds a lot of tests.

[mergify]

The Firedancer team maintains a line-for-line reimplementation of the
native programs, and until native programs are moved to BPF, those
implementations must exactly match their Agave counterparts.
If this PR represents a change to a native program implementation (not
tests), please include a reviewer from the Firedancer team. And please
keep refactors to a minimum.

[mergify]

If this PR represents a change to the public RPC API:

1. Make sure it includes a complementary update to rpc-client/ (example)
2. Open a follow-up PR to update the JavaScript client @solana/kit (example)

Thank you for keeping the RPC clients in sync with the server API @buffalojoec.

[codecov-commenter]

Codecov Report

❌ Patch coverage is 97.32143% with 3 lines in your changes missing coverage. Please review.
✅ Project coverage is 83.0%. Comparing base (67d3dd1) to head (190c17a).
⚠️ Report is 74 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff            @@
##           master   #10681    +/-   ##
========================================
  Coverage    83.0%    83.0%            
========================================
  Files         849      849            
  Lines      318240   318329    +89     
========================================
+ Hits       264335   264453   +118     
+ Misses      53905    53876    -29     

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[t-nelson]

r+ sme. @Lichtso looks like this was introduced by a change you made ages ago, can you review?

[t-nelson]

after update/rebase, i'm still r+ sme. merge on @Lichtso approval