fix: harden swap validation

[ethicnology]

Harden Bitcoin and Liquid swap handling against malformed or inconsistent server responses.

This PR:

• validates hashlocks, timelocks, key roles, addresses, and networks when constructing swap scripts
• rejects non-minimal or invalid script encodings
• verifies lockup transaction IDs against the returned transaction hex
• validates cooperative server keys before MuSig2 signing
• checks the exact lockup output amount before claiming
• verifies completed-swap preimages against their expected hashes
• redacts private keys and preimages from Debug output
• adds stricter Bitcoin and Liquid network conversions
• improves coverage for malformed responses and transaction validation

Security impact

Previously, some server-provided values were trusted independently even when they described the same swap. A compromised or faulty server could therefore return inconsistent scripts, keys, transactions, amounts, or network data and defer failure until a later signing or broadcasting step.

The new checks bind these values together and reject inconsistencies before funds are claimed, refunded, or cooperatively signed.

Compatibility

Valid swaps keep the same behavior.

The changes intentionally reject malformed or internally inconsistent API responses that may previously have progressed further through the swap flow.