Chain reorganization not handled

### Problem

Blockchain reorg:

1. deposit seen → swap continues
2. block orphaned
3. deposit disappears
4. platform already paid out

Loss is irreversible.

### Required Solution

Confirmation policy:

* wait N confirmations
* reorg rollback handling
* swap state reversal if block invalidated