Confirm transactions by merkle proof and reinstate coins only on a quorum (B-83, TX-06, TX-22, TX-23, ELC-25, ELC-26, DEP-02, DEP-08, AUD-18, ADR-07)

poll_once marked a transaction confirmed on one server's `height > 0`, and
reinstate_reappeared_utxos restored a coin written off as spent outside the platform on
the active server's word alone, so a hostile active server could report a
never-relayed payout as confirmed (winner unpaid, round closed) or put a spent coin
back into a balance.

- electrum/merkle.py: pure merkle-branch verification against a block header.
- ElectrumListener.confirmation_proven(txid, height): the *other* servers are asked for
  blockchain.transaction.get_merkle; a strict majority of at least the quorum minimum
  must return a proof that recomputes to the merkle root of that block's header (block
  height and position checked too). The header is the tip the listener holds, or for an
  older block the one a majority of the quorum agrees on and that meets its own target;
  a height above our tip cannot be proven. Quorum rules are _corroborate_majority's.
- poll_once takes the listener as `network`: the active server's history only nominates
  a candidate (txid, height); the row confirms only when the proof holds, and stays
  pending otherwise. With no network nothing confirms. ConfirmationPoller wires it.
- The reconciler's late-confirmation check of failed rows (B-78) now puts each claimed
  (txid, height) to the same proof instead of counting histories.
- refresh_user splits reinstatement like a credit: find_reinstate_candidates (read-only;
  same outpoint, recorded amount, confirmed) -> corroborate_utxo_reinstatement (same
  quorum as a credit) -> reinstate_reappeared_utxos writes only what was corroborated,
  rechecking the mark under the lock. Nothing is committed in the read phase any more.
- Broadcast fan-out, the third part of the finding, shipped with B-76.

Tests changed because the spec changed: every poll_once call now passes a network that
proves (FakeNetwork) — the confirmation tests are otherwise unchanged; the failed-row
"quorum does not confirm" test now asserts the claim goes to the proof.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

tests/unit/test_tx_versions.py

@@ -273,7 +273,7 @@ async def test_a_crash_between_the_broadcast_and_the_switch_over_leaves_the_repl
 
     # The network confirms the candidate: the poller recognises it and realigns the row.
     client.history = [{"tx_hash": candidate, "height": 101}]
-    assert await poll_once(session_factory, client) == 1
+    assert await poll_once(session_factory, client, FakeNetwork()) == 1
     async with session_factory() as session:
         row = await session.get(PendingTransaction, seeded["pending_id"])
         assert row.status == "confirmed" and row.current_txid == candidate
@@ -388,7 +388,7 @@ async def test_the_confirmation_of_an_earlier_version_confirms_the_row_and_retar
     third = await bump_fee(session_factory, client, seeded["pending_id"])
 
     client.history = [{"tx_hash": seeded["first_txid"], "height": 77}]
-    assert await poll_once(session_factory, client) == 1
+    assert await poll_once(session_factory, client, FakeNetwork()) == 1
 
     async with session_factory() as session:
         row = await session.get(PendingTransaction, seeded["pending_id"])
@@ -404,7 +404,7 @@ async def test_an_unrelated_txid_in_the_history_does_not_confirm_the_row(session
     seeded = await _seed_pending_bet(session_factory)
     client = _Chain()
     client.history = [{"tx_hash": "ab" * 32, "height": 5}]
-    assert await poll_once(session_factory, client) == 0
+    assert await poll_once(session_factory, client, FakeNetwork()) == 0
     async with session_factory() as session:
         assert (await session.get(PendingTransaction, seeded["pending_id"])).status == "pending"