bark: Add proper sanity checking on incoming VTXOs from mailbox

• check or remove this line after you've added a CHANGELOG entry or if your PR doesn't need one (they should go into CHANGELOG/unreleased/)