Feat/fallback selector security check

[Aboudjem]

• add new error: error FallbackSelectorForbidden();
• The use of OnInstall + OnUninstall selector should be avoided as they can lead to security issues
• Add run on prettier on the gas report script to avoid too much diff when pushing gas reports
• lint fix
• remove CI on push

[github-actions]

Changes to gas cost

Generated at commit: ccfddb76d023d458caa5615a93dc854824cb3893, compared to commit: 61cced585686781952cf972c60cd7d7e0966cee6

🧾 Summary (5% most significant diffs)

Contract	Method	Avg (+/-)	%

---

Full diff report 👇

Contract	Deployment Cost (+/-)	Method	Min (+/-)	%	Avg (+/-)	%	Median (+/-)	%	Max (+/-)	%	# Calls (+/-)
Nexus	4,412,316 (+38,079)	execute installModule	6,368 (0) 27,921 (0)	0.00% 0.00%	47,628 (+2) 33,124 (+5)	+0.00% +0.02%	36,232 (0) 34,715 (0)	0.00% 0.00%	143,146 (0) 38,844 (0)	0.00% 0.00%	76 (0) 23 (0)
Bootstrap	1,660,788 (+38,105)

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 86.78%. Comparing base (61cced5) to head (3a03ad7).

Additional details and impacted files

@@            Coverage Diff             @@
##              dev      #85      +/-   ##
==========================================
+ Coverage   86.73%   86.78%   +0.05%     
==========================================
  Files          35       35              
  Lines         769      772       +3     
  Branches      107      108       +1     
==========================================
+ Hits          667      670       +3     
  Misses         88       88              
  Partials       14       14              

Flag	Coverage Δ
foundry	71.85% <50.00%> (-0.03%)	⬇️
hardhat	86.78% <100.00%> (+0.05%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[livingrockrises]

can you describe what's the unexpected security behavior?

[Aboudjem]

"If it’s added a fallback method. Anyone can uninstall and reinstall the module. If it’s a validator, this will most likely pwn the account"

[openzeppelin-code]

Feat/fallback selector security check

Generated at commit: 3a03ad7302761296e8e5f3552394b355f8bc6846

🚨 Report Summary

	Severity Level	Results
Contracts	Critical High Medium Low Note Total	0 2 0 6 23 31

---

For more details view the full report in OpenZeppelin Code Inspector

[github-actions]

🤖 Slither Analysis Report 🔎

Slither report

# Slither report

THIS CHECKLIST IS NOT COMPLETE. Use --show-ignored-findings to show all the results.
Summary

_This comment was automatically generated by the GitHub Actions workflow._