Add a test for withdrawing to the wrong recipient

[obycode]

In 3 tests in l1_observer_test.rs, there is a todo item:

// TODO: call withdraw from unauthorized principal once leaf verification is added to the subnet contract

This leaf verification is present in the contract now, so we can add these tests.