Restrict available RPC methods for `snap.request()` by means of an allowlist

[rekmarks]

Currently, we restrict the RPC methods available to snap.request() by means of a blocklist. We should consider replacing this with an allowlist explicitly listing each permitted method. In this way, we will never fail to prevent an RPC method from being allowed through the snap RPC provider.