[KGA-29] [KGA-136] fix: cases with Cairo precompiles and delegatecalls

[enitrat]

Fixes the issue raised during the audit about eventual honeypots that could lure a user and manipulate starknet tokens without explicit approvals

1. Remove dependence on the code_address for whitelisting, which were reported dangerous.
2. Disable ability of having nesting a delegatecall to 0x75001 at protocol level. (no longer possible to do User A -call-> contract C -delegatecall->DualVmToken -delegatecall->0x75001 as a byproduct of 1.
3. Added noDelegateCall modifier to L2KakarotMessaging and DualVMToken for extra security
4. Added associated tests under Security/

https://github.com/code-423n4/2024-09-kakarot-findings/issues/38
https://github.com/code-423n4/2024-09-kakarot-findings/issues/124

Closes #1562

---

This change is 

[codecov]

Codecov Report

Attention: Patch coverage is 54.54545% with 5 lines in your changes missing coverage. Please review.

Project coverage is 63.6%. Comparing base (289c2e8) to head (8f983aa).
Report is 5 commits behind head on main.

Files with missing lines	Patch %	Lines
cairo_zero/kakarot/interpreter.cairo	0.0%	4 Missing ⚠️
...zero/kakarot/precompiles/precompiles_helpers.cairo	83.3%	1 Missing ⚠️

Additional details and impacted files

@@          Coverage Diff          @@
##            main   #1567   +/-   ##
=====================================
  Coverage   63.6%   63.6%           
=====================================
  Files         44      44           
  Lines       8343    8341    -2     
=====================================
+ Hits        5309    5313    +4     
+ Misses      3034    3028    -6     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[notion-workspace]

Kakarot precompiles can be abused by malicious contracts by delegate-calling whitelisted contracts

[notion-workspace]

Unauthorized Contracts Can Bypass Precompile Authorization via delegatecall in Kakarot zkEVM

[obatirou]

All relevant end to end tests passes but there is problems with relayers cc @ClementWalter

[ClementWalter]

ok for me, I was a bit surprised in the beginning in the tests/end_to_end/NoDelegateCall/test_dual_vm_token_hack.py test that the test was failing with and without the modifier, but it's because we also did the modif in cairo to remediate the issue