SQ Token Staking Drain via Hardcoded Owner Backdoor

The attacker used a type-0x4 EIP-7702-authorized EOA to call Staking owner-only functions, set `stakeDays` to zero, mint fake positions with `stakeOwner()`, cash out repeated `unstake()` redemptions, and sweep remaining SQi for a final dump.