Gated mint program

[pileks]

Introduces gated_mint, a new program that gates an SPL Mint behind an admin-managed whitelist by holding the mint's freeze authority. Whitelisted users move tokens through gated_invoke, which thaws relevant token accounts before a CPI into a whitelisted target program and re-freezes them after. Couples into v08_launchpad: any base mint with a freeze authority must point it at the deterministic gated_mint_config PDA.

The gated_mint_config PDA stores two authorities: a privileged admin (set once at init, controls everything) and an optional whitelist_admin (a delegated role that can only add whitelisted users). The admin can rotate or clear the whitelist_admin at any time.

Instructions

Instruction	Role
initialize_gated_mint	Moves the mint's freeze authority into the gated_mint_config PDA (seed ["gated_mint_config", mint]) via set_authority CPI; stores per-mint admin and an optional whitelist_admin (must differ from admin).
add_whitelisted_user	Callable by either admin or the configured whitelist_admin; creates a WhitelistedUser PDA at ["whitelisted_user", mint, user].
set_whitelist_admin	Admin-only; sets, rotates, or clears the optional whitelist_admin on gated_mint_config. New value must differ from admin. Blocked once gating_disabled is true.
gated_invoke	Whitelisted-user-only; for each mint token account in remaining_accounts, thaws if frozen, runs invoke on target_program (must be in WHITELISTED_PROGRAMS, must not be gated_mint::ID), then re-freezes any account left in Initialized state.
disable_gating	Admin-only one-way switch; blocks gated_invoke, add_whitelisted_user, and set_whitelist_admin, unlocks permissionless thaw_account.
thaw_account	Permissionless unwind path callable only after disable_gating; thaws a single token account of the gated mint.

Other Changes

• v08_launchpad::initialize_launch now requires that, if base_mint.freeze_authority is set, it equals the canonical gated_mint_config PDA derived from base_mint. This is a pure on-chain find_program_address check, no CPI into gated_mint. Mints without a freeze authority continue to work unchanged.
• SDK: new @metadaoproject/programs/gated_mint (v0.1) module with GatedMintClient, PDA helpers, and generated types; re-exported from the package root.
• Tests: unit tests for each gated_mint instruction (including set_whitelist_admin coverage and whitelist_admin-signed paths in add_whitelisted_user) plus tests/integration/gatedLaunchpadV8.test.ts exercising the full lifecycle: init gated mint → init/start/fund/settle launchpad_v8 launch → claim (frozen ATAs thawed and re-frozen via gated_invoke) → disable gating → permissionless thaw_account.