lib: validate policy block heights/deltas and use checked arithmetic

This is an alternative to !2036 (closed) that doesn't introduce bounding types, but instead prohibits integer arithmetic with side effects in bark-lib.