Rollup node: Only allow to apply PVM patches in private rollups

What

Follow up from !12907 (merged) and !12904 (merged).

The rollup node will only apply unsafe PVM patches on the genesis state when the rollup is originated as private.

Why

This ensures that the patch is applied in a non publicly refutable setting. It prevents someone from originating a rollup that requires an unsafe PVM patch without the rollup from being initially private.

How

Checks there is a whitelist on the rollup at the rollup genesis (origination) block.

Manually testing the MR

dune exec tezt/tests/main.exe -- -f sc_rollup.ml unsafe_patch