P2 — Token-2022 transfer hook

Whitelist-gated mint with allow/deny LiteSVM tests

Mint with hook that rejects non-whitelisted transfers. Deliverable: LiteSVM tests covering both allow and deny path.