[GnoVM]: Do not allow realms to store references to objects owned by other realms

[deelawn]

The issue title describes it pretty well. The following test should not pass because bbb is trying to save a reference to an object owned by aaa:

loadpkg gno.land/r/xx/aaa $WORK/aaa
loadpkg gno.land/r/xx/bbb $WORK/bbb

## start a new node
gnoland start

gnokey maketx call -pkgpath gno.land/r/xx/bbb -func SaveARef -gas-fee 1000000ugnot -gas-wanted 2000000 -broadcast -chainid=tendermint_test test1
stdout 'OK!'


-- aaa/a.gno --
package aaa

var A int

-- bbb/b.gno --
package bbb

import "gno.land/r/xx/aaa"

var B *int

func SaveARef() {
    B = &aaa.A
}

[omarsy]

Don't know, Why should we forbid this case? If we do, we should forbid these cases ?

loadpkg gno.land/r/xx/aaa $WORK/aaa
loadpkg gno.land/r/xx/bbb $WORK/bbb

## Start a new node
gnoland start

gnokey maketx call -pkgpath gno.land/r/xx/bbb -func SaveARef -gas-fee 1000000ugnot -gas-wanted 2000000 -broadcast -chainid=tendermint_test test1


-- aaa/a.gno --
package aaa

var A int = 5

func GetRef() *int {
  return &A
}


-- bbb/b.gno --
package bbb

import "gno.land/r/xx/aaa"

var B *int

func SaveARef() {
    B = aaa.GetRef()
}

loadpkg gno.land/r/xx/aaa $WORK/aaa
loadpkg gno.land/r/xx/bbb $WORK/bbb

## Start a new node
gnoland start

gnokey maketx call -pkgpath gno.land/r/xx/bbb -func SaveARef -gas-fee 1000000ugnot -gas-wanted 2000000 -broadcast -chainid=tendermint_test test1


-- aaa/a.gno --
package aaa

var A *int


-- bbb/b.gno --
package bbb

import "gno.land/r/xx/aaa"

var B *int

func SaveARef() {
    B = aaa.A
}

[zivkovicmilos]

From the sync call:

This is a wanted behavior for now.
Reference for realm ownership: #2743