Only allow strictly positive transfers

This PR adds a new DB constraint and stops `take_over()` from creating null transfers.
`branch.sql` is manually merged into `schema.sql` by the person who does the deployment. Here's the commit for this PR: https://github.com/gratipay/gratipay.com/commit/7213a948a6ebfd79157ae5ccfa92999dba06c94c