fix: harden parsing and signing against malformed input

Found by the fuzzing harness added in this PR:

- signed left shift computing the Merkle tree traversal mask
- zero-length memmove when merging parser buffers
- out-of-range integer conversions and a signed/unsigned comparison in PSBT signing