[Bug]: ownPublicKey() is not cryptographically safe

[acedward]

Prerequisites

• I have read the Contributing Guidelines.
• I agree to follow the Code of Conduct.
• I have searched for existing issues that already report this problem, without success.

What are the steps to reproduce this issue?

In Ownable.compact

  export circuit assertOnlyOwner(): [] {
    Initializable_assertInitialized();
    const caller = ownPublicKey();
    assert(caller == _owner.left, "Ownable: caller is not the owner");
  }

What happens?

ownPublicKey() is a witness call that provides user information.
This value is not constrained to the prover's actual key.
Therefore any value can be passed.

What were you expecting to happen?

Use hash(secret) instead for ownership.

Paste any relevant logs, error output, etc.

Additional context

No response

Code Reproduction URL

No response

Version

0.29.0 (Default)

[0xisk]

Thank you @acedward, will close this as it is tracked here #435