Overview

Add the ifrSenderVersion optional generic argument to the IDL alongside ifrFlags, and add jstests
covering unprivileged-client rejection of ifrFlags and ifrSenderVersion propagation on outgoing shard commands.

Scope of Work

* src/mongo/idl/generic_argument.idl — add ifrSenderVersion field (cherry-pick from ifr-wire branch)
* src/mongo/db/commands/profile_common.cpp — minor allowlist change (same cherry-pick)
* jstests/noPassthrough/ifr_idl_wire_auth.js — new: verify unprivileged client cannot supply ifrFlags
* jstests/noPassthrough/ifr_sender_version_propagation.js — new: verify ifrSenderVersion appears in outgoing shard commands

Acceptance Criteria

* ifrSenderVersion declared in IDL as optional internal field, forwarded to shards
* jstest confirms ifrFlags rejected with authorization error from non-internal client
* jstest confirms ifrSenderVersion present on shard-bound aggregate commands