fix: refuse to create new clsig if we switched to a different fork while we were signing

fix: refuse to create new clsig if we switched to a different fork while we were signing #8736