Introduce Predict oracle lifecycle cap

[pei-mysten]

Summary

• Add MarketOracleLifecycleCap for lifecycle-only operations: expiry creation, explicit settlement, and settled-market compaction.
• Move registry::create_expiry_market, market_oracle::settle_if_possible, and expiry_market::compact_storage to require the lifecycle cap instead of the high-privilege writer cap.
• Bind lifecycle caps to both a writer cap ID and a Pyth Lazer feed ID, so lifecycle-created markets authorize the intended writer cap and reject use with the wrong feed.
• Update the Predict gas benchmark setup to create both the writer cap and lifecycle cap.

Stack

• PR 1: Rename Predict oracle cap to writer cap #1069 renames MarketOracleCap to MarketOracleWriterCap without changing behavior.
• This PR is PR 2 of 2 and contains the behavior/security split.

Security rationale

Before this PR, a service holding the oracle cap for lifecycle work also had price-writing and oracle-config authority. That made a compromised lifecycle/market-management pod much more dangerous than its job required.

This split narrows the blast radius:

• HFT and quoter services hold MarketOracleWriterCap and can continue to update prices, SVI, and oracle config for authorized markets.
• Lifecycle services hold MarketOracleLifecycleCap and can create future expiries, explicitly settle from already-valid oracle data, and compact settled markets, but cannot write prices or tune oracle bounds.
• Lifecycle caps are feed-bound via pyth_lazer_feed_id, preventing a lifecycle cap for one asset/feed from creating markets for another.
• Newly-created markets seed their authorized writer-cap set from the lifecycle cap stored writer_cap_id, so lifecycle can provision markets for HFT without holding the writer cap object.

Tests

• sui move test -p packages/predict -i 100000000 oracle_cap_tests
• sui move test -p packages/predict -i 100000000 registry_create_tests
• sui move test -p packages/predict -i 100000000 market_oracle_settlement_tests
• sui move test -p packages/predict -i 100000000 compact_storage
• sui move test -p packages/predict -i 100000000 market_oracle_update_prices_tests
• sui move test -p packages/predict -i 100000000 market_oracle_update_svi_tests
• sui move test -p packages/predict -i 100000000 market_oracle_set_bounds_tests
• npx --yes --package @mysten/prettier-plugin-move prettier-move -c $PWD/packages/predict/**/*.move
• git diff --check
• ./packages/predict/simulations/node_modules/.bin/tsc -p packages/predict/simulations/tsconfig.json --noEmit --types node