Add overflow protection for balance arithmetic

[dzekojohn4]

Replace raw + and - on i128 balances with checked_add / checked_sub, panicking with "arithmetic overflow" on None. Prevents balance corruption on extreme inputs.