fix(provisioning): export useful namesByAddress

[dckc]

refs: #8113
(doesn't close it until #8786 lands)
refs: #8786

Description

The namesByAddress provided by the provisioning vat is disconnected from namesByAddressAdmin, so it never gets populated.

Fortunately, the relevant nameHubKit is in baggage. So the fix here is to return that one.

Security Considerations

This should make it unnecessary for future core-eval scripts to get the whole namesByAddressAdmin authority when they only need namesByAddress to do something like deliver fees.

The permit of the upgrade core-eval is:

      consume: {
        vatStore: true,
        vatAdminSvc: true,
      },
      produce: {
        namesByAddress: true,
      },

Read/write access to the whole vatStore is excess authority; we only need access to read one of its entries, not authority to scribble over all the others and upgrade all the other vats. (cc @raphdev )

vatAdminSvc is needed to look up a bundleID (hash) and return the corresponding bundleCap. Its only method beyond that sort of bundle lookup is E(vatAdminSvc).createVat(). That method is more than we need, but while it can be wasteful, it doesn't pose any risk to integrity.

Scaling Considerations

n/a

Documentation Considerations

fixes the chain to agree with our docs on name services

Testing Considerations

Includes a unit test.

The upgrade proposal here works on a release branch (see #8786) but won't work on master due to a breaking change in @endo/patterns (#8826). So we don't have a test that runs it.

1.0.0 (2023-12-12)
⚠ BREAKING CHANGES
patterns: tag and retype guards

Upgrade Considerations

The bug is localized to the provisioning vat, so upgrading it seems to suffice.

Perhaps we should fix #8408 while we're at it?

[michaelfig]

Good catch!