[OpenAI Codex] [ Crypto ] Fix GovernanceToken tx.origin delegation

[justusaugust]

/claim #912

Summary

• Replace all tx.origin delegation/admin paths with msg.sender-based authorization and OpenZeppelin Ownable for snapshot.
• Keep delegated voting accurate through token transfers by updating delegatedPower in the ERC20 update hook.
• Add a Solidity runtime test that proves a phishing contract cannot delegate a victim's votes, legitimate contract-held delegation works, owner-only snapshot is enforced, and proposal voting still uses the corrected voting power.

Verification

• npm install --no-package-lock
• npm test

Demo Video

• Short demo video for this PR

[github-actions]

Unfortunately the changes in this PR didn't fully resolve the issue. Please rework your solution and submit a new pull request.

Make sure to review the acceptance criteria in the linked issue and verify all conditions are met before resubmitting. See CONTRIBUTING.md for guidelines.