Allow for permissioned transfers

[kantp]

Proposed feature

Allow the admin contract to approve transfers, depending on sender, receiver, and amount.

Why

This will enable implementing tokens that need KYC/AML.

Dependencies

Implementation of this will be much easier once o1-labs/o1js#1889 has been resolved. That feature will allow conditionally calling into the admin contract from transfer(). It might be possible to implement this feature without that functionality, but only in a very clunky way (adding another method permissionedTransfer(), and then disabling calls to transfer() for those tokens that want the admin contract to be called.