Aave DIVA Wrapper

Description:
The approveCollateralTokenForAave function is callable by any user, allowing them to reset the AaveDIVAWrapper's allowance for a registered collateral token to type(uint256).max. While the Aave pool address is immutable, this exposes unnecessary surface for potential abuse (e.g., spamming approvals) and deviates from least-privilege principles.

Impact:

• Minimal direct risk, but unnecessary exposure of a privileged function.

Recommendation:
Restrict the function to the contract owner by adding the onlyOwner modifier to approveCollateralTokenForAave.