Allow SetUpgradeAuthority instruction in CPI calls (#16676)