Fix off-by-one in Nat fromInteger