treasury.rs state-changing functions have zero internal access control

[N-thnI]

Description

Add caller authentication to the treasury module itself, not just its entrypoint wiring.

Problem Statement

engine-core/src/treasury.rs: schedule_outflow() (lines 69-99), execute_outflow() (102-130), and record_snapshot() (141-194) take no caller/requester parameter and never call require_auth() or any admin/signer check. Sibling modules already gate themselves — emergency_recovery.rs::request/approve call require_admin + requester.require_auth(), and governance.rs::approve calls require_signer. This is distinct from issue #178 ("not wired into any entrypoint"): even after #178 is fixed by adding ControlPlane wrapper entrypoints, a contributor could wire these functions up without adding auth, since nothing in treasury.rs itself enforces it.

Proposed Changes

• Add caller parameters and require_auth()/require_admin checks to schedule_outflow, execute_outflow, and record_snapshot, matching the pattern already used in emergency_recovery.rs and governance.rs
• Add tests asserting unauthenticated/unauthorized calls are rejected

Technical Implementation Scaffolding

• Target Repository: vero-core-engine
• Target Path: engine-core/src/treasury.rs
• Branch Naming: fix/issue--treasury-access-control
• Authority Context: Security-sensitive — fund outflow authorization

Acceptance Criteria

• All three functions reject calls without proper authorization
• Tests cover the rejection path for each function
• Coordinate with [BUG] treasury.rs, burn.rs, emergency_recovery.rs, and governance-gated upgrade.rs are fully implemented but never wired into any contract entrypoint #178 so the eventual entrypoint wiring doesn't bypass this

Definition of Done

• Reviewed by lead maintainer
• Pull request merged via verified status check

[Divine-mercyx]

Hello, i would like to work on this issue.

[grantfox-oss]

🦊 GrantFox — @Divine-mercyx has been assigned to this issue as part of the Third Campaign campaign!

Next steps:

1. Open a Pull Request referencing this issue (e.g., Closes #204)
2. Your PR will be reviewed by the Vero-protocol maintainers

Good luck! Track your progress on GrantFox.

[grantfox-oss]

🎉 This issue has been marked as completed on GrantFox as part of the Third Campaign campaign!

@Divine-mercyx's PR #221 was approved and merged by @N-thnI.

🏆 @Divine-mercyx: You earned 35 FoxPoints for this contribution! Your current tier: Explorer (344 total points). Track your full progress on GrantFox.

👏 Great work, @Divine-mercyx! Keep contributing to Vero-protocol.