[EVM] Use double commit ownership transfer

[nik-suri]

On Solana, ownership transfer is double commit. This means that the new admin must accept the ownership transfer to finalize it. The old owner can also cancel the ownership transfer before the new admin accepts.

On EVM, ownership transfer is single-shot. This is risky in case the owner accidentally transfers to the wrong address.

We should update EVM ownership transfer to be double commit.