Increase sequence id on failed operation

When an operation fails but the signature was legit, e.g. an attempt to overdraft, we should increase the sequence ID, otherwise replay attacks are made possible.

Start by locating the sequence ID handling for failed operations and the validation path for legitimate signatures, then trace the overdraft example described in the issue. Done means a legitimately signed operation that fails still advances the sequence ID and replay attacks are no longer possible; no file or test is named, so the relevant coverage must first be identified.

Written by the indexing model from the issue text.