feat: reorg handling

[parketh]

Summary

This PR adds reorg handling to the FG.

The current FG cannot handle L2 block reorgs because the new block hash breaks the finality votes query. This causes the finalized head to become stuck.

We implement a new whitelist system where:

• a privileged admin can whitelisted reorged / forked blocks in the CW contract
• the FG checks blocks against the CW whitelist and can skip them to unblock the derivation pipeline

Test plan

make test

[bap2pecs]

this seems irrelevant to the PR

do you know why we didn't include it? IIRC we intentionally removed this to prevent DoS attack. plus, there is no call site of this grpc method anyway

[parketh]

we can remove it from this PR and add it to a new one. It is needed for debugging the isBlockFinalized call from Babylon. I was trying to call it during most recent debug of devnet-7 but realized we never exposed the grpc method.

[bap2pecs]

we can remove it from this PR and add it to a new one

it's fine to keep it here but the question is whether we should expose it. probably fine for now but we need to be aware of the potential DoS attacks

does calling this function making babylon rpc calls every time or it's reading from the db? if it's calling the Babylon rpc, then there is a DoS attack vector