[Status Network Contracts] Griefer can block KarmaAirdrop claim

Context: https://github.com/Cyfrin/audit-2025-12-statusl2/issues/20

TLDR:

- Attacker front-runs `claim()` with `delegateBySig()` called, consuming nonce
- `claim()` of victim reverts because nonce is already used
- Repeat