Use unsigned-safe comparing in clamp contract

Prevents wrong assertion failures on some situation. For example `clamp(5, -1, 2u)` failed, because `-1 <= 2u` is false.