FV-ANC-5-CL2 CPI without signer seeds

Bad

// CPI signer seeds missing
invoke_signed(&instruction, &accounts, &[]);

Good

// Provide signer seeds securely during CPI
let seeds = &[b"vault".as_ref(), &[bump]];
invoke_signed(&instruction, &accounts, &[seeds]);