fix: Integer wrap in external-plugin review pair count causes out-of-bounds writes in ui_approve_tx

fix: Integer wrap in external-plugin review pair count causes out-of-bounds writes in ui_approve_tx #2268