Raydium Legacy Remove-Liquidity LP Mint Validation Bypass

The legacy remove-liquidity path did not sufficiently bind the supplied LP mint and user LP token account to the pool's canonical LP mint, so attacker-created SPL tokens with supply 1 were treated as redeemable LP shares and used to drain pool vault assets.