runtime: checked math for Bank::withdraw (backport #16767)

[mergify]

This is an automatic backport of pull request #16767 done by Mergify.

Cherry-pick of be29568 has failed:

On branch mergify/bp/v1.6/pr-16767
Your branch is up to date with 'origin/v1.6'.

You are currently cherry-picking commit be2956831.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Unmerged paths:
  (use "git add <file>..." to mark resolution)
	both modified:   runtime/src/bank.rs

no changes added to commit (use "git add" and/or "git commit -a")

To fixup this pull request, you can check out it locally. See documentation: https://help.github.com/articles/checking-out-pull-requests-locally/

---

Mergify commands and options

More conditions and actions can be found in the documentation.

You can also trigger Mergify actions by commenting on this pull request:

• @Mergifyio refresh will re-evaluate the rules
• @Mergifyio rebase will rebase this PR on its base branch
• @Mergifyio update will merge the base branch into this PR
• @Mergifyio backport <destination> will backport this PR on <destination> branch

Additionally, on Mergify dashboard you can:

• look at your merge queues
• generate the Mergify configuration with the config editor.

Finally, you can contact us on https://mergify.io/

[mergify]

automerge label removed due to a CI failure

[codecov]

Codecov Report

Merging #16788 (dff889c) into v1.6 (9413051) will increase coverage by 0.0%.
The diff coverage is 86.0%.

@@           Coverage Diff            @@
##             v1.6   #16788    +/-   ##
========================================
  Coverage    82.9%    82.9%            
========================================
  Files         414      416     +2     
  Lines      114017   114527   +510     
========================================
+ Hits        94544    94995   +451     
- Misses      19473    19532    +59