Clear in-memory site approvals on address switch

Non-remembered approvals should not survive switching to a different
address and back. Wipe connectedSites when broadcasting
accountsChanged so temporary approvals require re-prompting.

src/background/index.js

@@ -332,6 +332,10 @@ async function handleRpc(method, params, origin) {
 
 // Broadcast accountsChanged to all tabs, respecting per-address permissions
 async function broadcastAccountsChanged() {
+    // Clear non-remembered approvals on address switch
+    for (const key of Object.keys(connectedSites)) {
+        delete connectedSites[key];
+    }
     const s = await getState();
     const activeAddress = await getActiveAddress();
     const allowed = activeAddress ? s.allowedSites[activeAddress] || [] : [];