fix: bound authority update size diff scan

[tracy-codes]

Summary

• compute the updated role data length with checked signed arithmetic
• avoid casting negative size diffs to usize in the boundary update scan

Validation

• cargo fmt --all
• cargo test -p swig from_instruction_bytes_rejects_short_actions_payload

---

^{Need help on this PR? Tag /codesmith with what you need. Autofix is disabled.}