OTAccount::Credit|Debit should fail on integer overflow

This PR adds checks for integer overflow. 
Can the amount be `< 0`?