Tower tile can sign arbitrary transactions

[ripatel-fd]

The keyguard does not sufficiently validate signing requests received from the tower tile.

Limit the tower tile to signing compact vote state updates (see src/choreo/tower/fd_tower.c fd_tower_to_vote_txn).

Reported by @jumpsiegel