fix(lang-v2): reject optional siblings in associated_token init const…

[akash-osec]

Fixes finding AI # 9

Init associated_token accepted optional mint/authority/token_program and reloaded raw views, ignoring the program-id sentinel. Check-only paths already returned ConstraintAccountIsNone. Init now rejects optional siblings at compile time.

[vercel]

@akash-osec is attempting to deploy a commit to the OtterSec Team on Vercel.

A member of the Team first needs to authorize it.

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

❌ Patch coverage is 72.72727% with 6 lines in your changes missing coverage. Please review.
⚠️ Please upload report for BASE (anchor-next@95dd39e). Learn more about missing BASE report.

Files with missing lines	Patch %	Lines
lang-v2/derive/src/parse.rs	72.72%	6 Missing ⚠️
❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files

@@              Coverage Diff               @@
##             anchor-next    #4917   +/-   ##
==============================================
  Coverage               ?   65.73%           
==============================================
  Files                  ?      127           
  Lines                  ?    16305           
  Branches               ?        0           
==============================================
  Hits                   ?    10718           
  Misses                 ?     5587           
  Partials               ?        0           

Flag	Coverage Δ
v2	65.73% <72.72%> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.