feat(scripts): accept a metadata uri when wrapping a token

[jackchuma]

Part 3 of 3. Stacked on #200, which in turn sits on #199. Review those first; the diff here shrinks to two files once they merge.

What's in it

The wrap-token command now calls wrap_token_v2 and takes an optional --uri, which is what serves a wrapped token's icon and description. Leaving it blank still works and produces a token without either, matching today's behavior.

Validation lives in the zod schema so the flag path and the interactive prompt share one definition, with the prompt surfacing the schema's own message. The length check counts UTF-8 bytes rather than characters, to match the onchain check, which measures uri.len() on a Rust String. MAX_URI_LEN is read from the IDL via getIdlConstant rather than duplicated here.

Worth a look during review

The metadata hash preimage in the handler is deliberately left alone. It has to mirror PartialTokenMetadata::hash on the program side, which excludes uri, or the script derives a mint address the program will not recognize. There's a comment to that effect at the call site.

Because a wrapped token's metadata is immutable after creation, whatever uri is passed here is permanent for that token.

Verification

scripts typechecks and the CLI loads on this branch, with --uri present in wrap-token --help.