fix: Add system_program checks

[crypto-vincent]

Problem

This is a followup to the internal audit:
https://docs.google.com/document/d/1A-LPShMpH7gft7Y_zGBrV23Qx5BOpxBVdaVA8Q5TXKg/edit?tab=t.0

This particular PR aims to address the following item:

• High 2: The system_program is unchecked in some IXs

Solution

Add a load_program in all instructions where it's missing

Greptile Summary

This PR implements security improvements by adding system program validation checks across processor files and fixes admin public key configuration for test/production environments.

• Added load_program(system_program, system_program::id())? validation in all processor files to ensure system program authenticity before PDA/lamport operations
• Fixed admin pubkey configuration in src/consts.rs to use correct keys: tEsT3eV6RFCWs1BZ7AXTzasHqTtMnMLCB2tjQ42TDXD for tests, 3FwNxjbCqdD7G6MkrAdwTd5Zf6R3tHoapam4Pv1X2KBB for production
• Reordered system program validation in src/processor/finalize.rs to occur before dependent operations
• Missing system program validation in process_close_ephemeral_balance() function needs to be addressed

_{💡 (5/5) You can turn off certain types of comments like style here!}

[greptile-apps]

_{8 file(s) reviewed, 1 comment(s)
Edit PR Review Bot Settings | Greptile}