[consensus] add missing checks for commit cert

[zekun000]

Cherry-pick a fix for an issue that a malicious node can use ordered cert as commit cert to panic other validators because we assert if the execution result is different from the cert (ordered cert has dummy values)

[trunk-io]

⏱️ 3h 48m total CI duration on this PR

Job	Cumulative Duration	Recent Runs
windows-build	43m	🟩
rust-smoke-tests	35m	🟩
rust-targeted-unit-tests	25m	🟩 🟩
forge-framework-upgrade-test / forge	17m	🟩
rust-lints	14m	🟩 🟩
forge-e2e-test / forge	14m	🟩
forge-compat-test / forge	13m	🟩
rust-images / rust-all	13m	🟩
cli-e2e-tests / run-cli-tests	11m	🟥
run-tests-main-branch	8m	🟩 🟩
rust-move-tests	7m	🟩 🟩
execution-performance / test-target-determinator	4m	🟩
rust-build-cached-packages	4m	🟩
test-target-determinator	4m	🟩
check	4m	🟩
general-lints	4m	🟩 🟩
check-dynamic-deps	3m	🟩 🟩
execution-performance / single-node-performance	2m	🟥
node-api-compatibility-tests / node-api-compatibility-tests	50s	🟩
semgrep/ci	44s	🟩 🟩
file_change_determinator	24s	🟩 🟩
file_change_determinator	23s	🟩 🟩
file_change_determinator	10s	🟩
permission-check	7s	🟩 🟩
permission-check	6s	🟩 🟩
permission-check	5s	🟩 🟩
permission-check	4s	🟩 🟩
permission-check	3s	🟩
determine-docker-build-metadata	3s	🟩

🚨 2 jobs on the last run were significantly faster/slower than expected

Job	Duration	vs 7d avg	Delta
cli-e2e-tests / run-cli-tests	11m	7m
rust-lints	8m	7m

_{settings ⋅ feedback ⋅ docs ⋅ learn more about trunk.io}

[igor-aptos]

Can you add in the description of the PR what the issue was and how this fixes it?

[github-actions]

✅ Forge suite compat success on 3ffe0986b5fe4acb76544ae7ae85d73b91a6a411 ==> 12637b4b08c1e779ad45d8653b4e10ba784afc00

Compatibility test results for 3ffe0986b5fe4acb76544ae7ae85d73b91a6a411 ==> 12637b4b08c1e779ad45d8653b4e10ba784afc00 (PR)
1. Check liveness of validators at old version: 3ffe0986b5fe4acb76544ae7ae85d73b91a6a411
compatibility::simple-validator-upgrade::liveness-check : committed: 6560.119522964896 txn/s, latency: 5003.338857564191 ms, (p50: 4900 ms, p90: 5900 ms, p99: 7200 ms), latency samples: 230560
2. Upgrading first Validator to new version: 12637b4b08c1e779ad45d8653b4e10ba784afc00
compatibility::simple-validator-upgrade::single-validator-upgrade : committed: 3390.078719917915 txn/s, latency: 9170.365741274878 ms, (p50: 9400 ms, p90: 13900 ms, p99: 14200 ms), latency samples: 138680
3. Upgrading rest of first batch to new version: 12637b4b08c1e779ad45d8653b4e10ba784afc00
compatibility::simple-validator-upgrade::half-validator-upgrade : committed: 3323.530598708836 txn/s, latency: 9386.42022911833 ms, (p50: 9400 ms, p90: 14200 ms, p99: 14500 ms), latency samples: 137920
4. upgrading second batch to new version: 12637b4b08c1e779ad45d8653b4e10ba784afc00
compatibility::simple-validator-upgrade::rest-validator-upgrade : committed: 6350.480850521189 txn/s, latency: 5128.499215246637 ms, (p50: 4800 ms, p90: 8400 ms, p99: 9700 ms), latency samples: 231920
5. check swarm health
Compatibility test for 3ffe0986b5fe4acb76544ae7ae85d73b91a6a411 ==> 12637b4b08c1e779ad45d8653b4e10ba784afc00 passed
Test Ok

• Grafana dashboard
• Humio Logs
• Axiom Logs
• Validator CPU Profile
• Fullnode CPU Profile
• Test runner output
• Test run is land-blocking

[github-actions]

✅ Forge suite realistic_env_max_load success on 12637b4b08c1e779ad45d8653b4e10ba784afc00

two traffics test: inner traffic : committed: 7889.34557597471 txn/s, latency: 4958.659187254351 ms, (p50: 4800 ms, p90: 6600 ms, p99: 10500 ms), latency samples: 3419520
two traffics test : committed: 100.0060702245383 txn/s, latency: 1927.0288888888888 ms, (p50: 1900 ms, p90: 2200 ms, p99: 3900 ms), latency samples: 1800
Latency breakdown for phase 0: ["QsBatchToPos: max: 0.214, avg: 0.204", "QsPosToProposal: max: 0.268, avg: 0.246", "ConsensusProposalToOrdered: max: 0.450, avg: 0.410", "ConsensusOrderedToCommit: max: 0.403, avg: 0.383", "ConsensusProposalToCommit: max: 0.810, avg: 0.793"]
Max round gap was 1 [limit 4] at version 1643154. Max no progress secs was 4.568968 [limit 15] at version 1643154.
Test Ok

• Grafana dashboard
• Humio Logs
• Axiom Logs
• Validator CPU Profile
• Fullnode CPU Profile
• Test runner output
• Test run is land-blocking

[github-actions]

✅ Forge suite framework_upgrade success on 3ffe0986b5fe4acb76544ae7ae85d73b91a6a411 ==> 12637b4b08c1e779ad45d8653b4e10ba784afc00

Compatibility test results for 3ffe0986b5fe4acb76544ae7ae85d73b91a6a411 ==> 12637b4b08c1e779ad45d8653b4e10ba784afc00 (PR)
Upgrade the nodes to version: 12637b4b08c1e779ad45d8653b4e10ba784afc00
framework_upgrade::framework-upgrade::full-framework-upgrade : committed: 1149.435453652345 txn/s, submitted: 1152.1210505066729 txn/s, failed submission: 2.6855968543279087 txn/s, expired: 2.6855968543279087 txn/s, latency: 2672.8723520249223 ms, (p50: 2100 ms, p90: 4800 ms, p99: 8700 ms), latency samples: 102720
framework_upgrade::framework-upgrade::full-framework-upgrade : committed: 1063.8183941381712 txn/s, submitted: 1066.007320875081 txn/s, failed submission: 2.188926736909817 txn/s, expired: 2.188926736909817 txn/s, latency: 2784.132561728395 ms, (p50: 2000 ms, p90: 5600 ms, p99: 9800 ms), latency samples: 97200
5. check swarm health
Compatibility test for 3ffe0986b5fe4acb76544ae7ae85d73b91a6a411 ==> 12637b4b08c1e779ad45d8653b4e10ba784afc00 passed
Upgrade the remaining nodes to version: 12637b4b08c1e779ad45d8653b4e10ba784afc00
framework_upgrade::framework-upgrade::full-framework-upgrade : committed: 635.7976147453237 txn/s, submitted: 637.5612697099432 txn/s, failed submission: 1.763654964619483 txn/s, expired: 1.763654964619483 txn/s, latency: 4762.072156726768 ms, (p50: 4200 ms, p90: 8400 ms, p99: 9600 ms), latency samples: 57680
Test Ok

• Grafana dashboard
• Humio Logs
• Axiom Logs
• Validator CPU Profile
• Fullnode CPU Profile
• Test runner output
• Test run is land-blocking