fix(withdrawals): cap callback gas limit

[mattsse]

Summary

• add a 10M withdrawal callback gas cap to the L2 outbox, shared constants, and ABI bindings
• cap processor transaction gas and bounce legacy over-cap withdrawals on L1 instead of retrying an unmineable callback
• add Solidity, Rust unit, and signed L2 E2E coverage for over-cap withdrawal rejection