Update arbitrary_cpi lint to check for Instruction and CpiContext::new calls

[S3v3ru5]

The lint is updated to check for Instruction {...} initialization instead of invoke calls. As a result,

• The lint is not needed check for both invoke, invoke_signed calls.
• Instead of traversing from invoke -> Instruction -> program, the lint can directly get Instruction -> program
• The updated lint does not report if the Instruction used by invoke is returned by a function defined in a dependency.

The updated lint also checks for calls to CpiContext::new and CpiContext::new_with_signer which are common in Anchor programs. The lint reports the call unless the program is the return value of .to_account_info() called on Anchor Program or Interface.

The majority of the updates could be implemented using HIR. However, some of the old functions written in MIR are reused and The lint requires further updates which most probably can only be implemented in MIR. Hence, the updates to lint also rely on MIR.