feat(svm): add Metaplex Core to smart wallet allowlist

Per request from @blockiosaurus on the PR — Metaplex's agent identity
platform routes agentic execution through the Metaplex Core program PDA
(assetSignerPda). Verified end-to-end against mainnet through a real
$0.02 USDC payment for the live x402 endpoint at mcp.cryptoiz.org/btc/regime.

The on-chain transaction shape is exactly what Path 2 was designed for:
top-level Metaplex Core `execute` (unknown to static parsing), inner
SPL TransferChecked matching the merchant's payment requirements.
extractTransfersFromInnerInstructions matches the inner transfer,
simulation passes, settlement lands.

Settlement tx: 5g5B3ZPHndS19tzUjPANgFC7J3nS8rT6dAFSuZ21bDfRHSSREKTbnN7XrYVp5haBmj4xDq2gD5A375evHq5y3vw6

Author: BranchManager69

typescript/packages/mechanisms/svm/src/exact/facilitator/scheme.ts

@@ -45,6 +45,7 @@ const DEFAULT_SMART_WALLET_ALLOWED_PROGRAMS = [
   "SMRTzfY6DfH5ik3TKiyLFfXexV8uSG3d2UksSCYdunG", // Squads Smart Account
   "SWiGmQedKzMz1tiTqoJCWeGDnGXfNBp2PkXLkpCAtQo", // Swig
   "GovER5Lthms3bLBqWub97yVrMmEogzX7xNjdXpPPCVZw", // SPL Governance
+  "CoREENxT6tW1HoK8ypY1SxRMZTcVPm7R94rH4PZNhX7d", // Metaplex Core
 ];
 
 /**
@@ -85,7 +86,7 @@ export type ExactSvmSchemeOptions = {
    * a program in this list will be accepted through the simulation path.
    * Prevents unknown/malicious programs from reaching CPI verification.
    *
-   * Default: Squads Multisig v4, Squads Smart Account, Swig, SPL Governance
+   * Default: Squads Multisig v4, Squads Smart Account, Swig, SPL Governance, Metaplex Core
    */
   smartWalletAllowedPrograms?: string[];
 };