Only allow strictly positive transfers

This PR adds a new DB constraint and stops `take_over()` from creating null transfers.
I think that @Changaco makes a separate commit to append branch.sql to schema.sql once the changes are made.