Fix anchor CI: surfpool, transfer-hook API, DecodeError, fixture files

- Install surfpool in CI (Anchor 1.0.0 uses it by default for anchor test)
- Fix transfer-hook programs (whitelist, counter, hello-world, transfer-cost):
  replace InitializeExtraAccountMetaList::extra_account_metas/count() with
  direct calls to handle_extra_account_metas/count() free functions; Anchor
  1.0.0 no longer auto-generates these as struct-associated methods
- Update Cargo.lock for nft-operations and token-fundraiser: bump
  solana-signature 3.3.0→3.4.0 to fix five8 1.0.0 DecodeError conflict
- Add missing mpl_token_metadata.so fixtures (nft-minter, nft-operations,
  pda-mint-authority, spl-token-minter, transfer-tokens); Anchor 1.0.0 IDL
  build compiles test files at build time, requiring include_bytes! fixtures

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: mikemaccana

.github/workflows/anchor.yml

@@ -111,13 +111,16 @@ jobs:
         with:
           anchor-version: 1.0.0
           solana-cli-version: stable
+      - name: Install Surfpool
+        run: curl -sL https://run.surfpool.run/ | bash
       - name: Display Versions
         run: |
           solana -V
           # it's okay to use --force in github action since all programs are tested in isolation
           solana-keygen new --no-bip39-passphrase --force
           rustc -V
           anchor -V
+          surfpool --version
       - name: Build and Test
         env:
           TOTAL_PROJECTS: ${{ needs.changes.outputs.total_projects }}