Create ocaps for Module accounts' bank

[fedekunze]

This structure should be changed to reduce the capability of the a module is able to do. A holder module should only be able to:

• send tokens from it's module account to another module account or regular wallet account
• take tokens from a regular wallet account to it's module account

In the provided design modules are able to send or take to any module account - this is a clear opportunity for modules to be improperly designed (or opportunity for malicious modules).

Originally posted by @rigelrozanski in #4255 (comment)

[fedekunze]

closed via #4255