OTAccount::Credit|Debit should fail on integer overflow

This PR adds checks for integer overflow. 
I believe invoices have an amount <0