WIP: SupplyController mint protection

[Ivshti]

Summary

Still haven't decided whether we'll merge this as there are a few ways to go:

• Do not merge, keep SupplyController the same and use an auxilary contract to control minting (don't allow direct mint key) - this can't work, as we need specific protection for the claim() function
• Merge and deploy with the new season of Rewards
• Do not merge, and remove any claiming keys from the active contract, and use a separate mechanism for claiming
  • can merge and deploy at any time later

Decisions as of Jan 2 2026

• there's no need to deploy this to make a new reward distribution mechanism work, as the new reward distribution mechanism will be a new contract (possibly MerkleDistirbutor + vesting additions)
• when the OLD rewards (season 0 and v1 rewards) are deprecated and we decide there will be no further distributions, we can kill the software key and OPTIONALLY (not truly needed) deploy the new supply controller