ICA AllowMessages on Arabica is incorrect

[rootulp]

Problem

On Arabica, the ICA host AllowMessages param is incorrect. It is currently a wildcard when it should be an allowlist of messages:

root@rootulp-arabica:~# celestia-appd query params subspace icahost AllowMessages
key: AllowMessages
subspace: icahost
value: '["*"]'

Wildcard is the default however it should've been overwritten with this list: https://github.com/celestiaorg/celestia-app/blob/2f74d9b84353b714295d3179b6df6c8315ffb813/app/ica_host.go#L3-L18

[rootulp]

On Arabica and Mocha we can use governance to modify it but we should fix the override so that it doesn't need a governance vote on mainnet.

[rootulp]

https://github.com/celestiaorg/celestia-app/pull/3182 was added before the module manager. Notably the module manager uses https://github.com/celestiaorg/celestia-app/blob/2f74d9b84353b714295d3179b6df6c8315ffb813/app/modules.go#L186 which does not have an overwritten default genesis state. The default genesis state was only overwritten for the app module basic.

[rootulp]

Please see meeting notes and hackMD doc for full details.

Summary:

• Short term: we'll fix on Arabica, Mocha, and Mainnet via a governance proposal
• Long term: in celestia-app v3.x we will hard-code the param to an explicit allowlist and make the param non governance modifiable
• Note: this means there will be a ~1 week time period on mainnet where the ICA allowlist will be a wildcard instead of an explicit allowlist. We think this isn't a serious security concern b/c other Cosmos chains (Cosmos Hub, Neutron) have this param.

[rootulp]

We're tackling this with three solutions:

1. https://github.com/celestiaorg/celestia-app/issues/3827
2. https://github.com/celestiaorg/celestia-app/issues/3836
3. https://github.com/celestiaorg/celestia-app/issues/3837