feat(app)!: add authz to the state-machine

[liamsi]

Overview

TODOs(notes to myself mainly)

• figure out if we need/want to add authz to our own module (to e.g. make it possible to pay for blobs or qgb txs via another account) I think the answer here is: yes, we should properly integrate authz with the blobs module. Main reason is that it can enable (e.g. rollkit) sequnecers with a known public key to delegate submitting pfbs to another hot-key, while clients can still validate against the known pub-key. The feegrant module only allows fees to be payed by the grantee the txs would be submitted by a different account/key though. This can happen in a follow-up PR though (needs an issue) and should be accompanied with a brief ADR for the rationale/motivation. Thanks to @zmanian for walking through potential user stories with me.
• double-check if I did not miss anything
• talk to team wrt to docs

ref: #1530

Checklist

• New and updated code has appropriate documentation
• New and updated code has new and/or updated testing
• Required CI checks are passing
• Visual proof for any user facing features like CLI or documentation updates
• Linked issues closed with keywords

[cmwaters]

I think the answer here is: yes, we should properly integrate authz with the blobs module.

What is this scope of this? Currently there is a GenericAuthorization which could be set to allow an account to execute all arbitrary PayForBlob messages. We could introduce some authorizations which permit the grantee to only execute PayForBlob messages for a certain namespace and/or under a maximum blob size. Does that sound right? We can do this as a separate PR

[cmwaters]

LGTM - I don't think you've missed any places where authz needs to be declared

[evan-forbes]

optionally, we could add a test case to the standard sdk smoke test, but I'll defer to the author as its purely bonus. also added #1546

LGTM

[gitpoap-bot]

Congrats, your important contribution to this open-source project has earned you a GitPOAP!

GitPOAP: 2023 Celestia Contributor:

Head to gitpoap.io & connect your GitHub account to mint!

Learn more about GitPOAPs here.