Reject abandoned branch hashes

[Frozen]

Summary

• reject the first abandoned shard 0 child at block 92,730,035 by exact hash
• keep the known malicious shard 0 block 92,730,036 and shard 1 block 94,978,279 rejected by exact hash
• enforce rejection before FBFT caching/PREPARE and before header, signature, body, receipt-chain, epoch-chain, head, TiKV, and off-chain writes
• reject embedded references to denied hashes in beacon crosslinks and incoming CX receipt source headers
• leave rollback, emergency recovery, and staged sync unchanged

This copies only the abandoned-branch rejection from Frozen#13. That PR itself is unchanged.

[Test]

• gofmt and goimports on changed Go files
• go test -mod=readonly ./consensus/engine ./internal/chain ./consensus ./core
• go vet -mod=readonly ./consensus/engine ./internal/chain ./consensus ./core
• git diff --check

[mergify]

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

• Queue this pull request