fix(invariants): account for market share price rounding

[clement-ux]

Summary

• Derive the additional share-price tolerance from the ERC-4626 market rounding loss tracked during the current handler call.
• Preserve the existing 2 wei split-operation tolerance without allowing previously tracked losses to mask later share-price decreases.
• Add a regression test reproducing the 3 wei loss found by the LidoARM invariant CI.

Context

The LidoARM invariant run failed when setActiveMarket deposited all ARM WETH into the active ERC-4626 market. The minted market shares converted back to 3 wei fewer assets. trackWethMarketRounding already recognized and recorded this as a valid one-market-share rounding loss, but ensureSharePriceNotDecreased still had a fixed 2 wei limit and reverted with SHARE_PRICE_DECREASED.

The modifier now snapshots the cumulative tracked loss before the handler, uses only the per-call delta, and converts that asset loss to share-price units with full-precision ceiling division.

Testing

• forge fmt --check
• forge build
• Targeted market-rounding regression tests: 2 passed
• Full local LidoARM suite: 10 passed, including 12,800 calls per invariant
• Exact failing fuzz seed replayed twice at CI depth 100: 14,000 runs and 1,400,000 calls per replay, with 0 reverts. The original failure occurred at run 13,906.