fix: prevent underflow in ukeire calculation

[smly]

• Use saturating_sub instead of plain subtraction in calculate_best_ukeire and calculate_best_ukeire_3p to prevent u32 underflow when visible tile counts exceed the remaining copies of a tile type.
• Add regression tests for both 4-player and 3-player variants to verify the saturation behavior.