feat(CoSigner): implementing contract-call and native-token-transfer permissions check

[geekbrother]

Description

This PR introduces the draft testing implementation for the following permissions check during the CoSign process:

• contract-call permission:
  Extracting the contract call address from the bundler's execution operation and comparing it to the permissions allowed for the address call.

• native-token-transfer permission:
  Extracted values from the bundler's execution batch are summarized and checked with the allowance.

Currently missing:

• Check for the period, start, and expiration,
• Tracking the already spent amount.

How Has This Been Tested?

• Manual testing only, integration tests will be added before merging.

Due Diligence

• Breaking change
• Requires a documentation update
• Requires a e2e/integration test update

[nopestack]

1st pass, looks good though some tests so we can verify what it does would be appreciated

[chris13524]

LGTM