Unpin slither and evaluate any new findings

[KevinSmall]

Allow CI to use latest stable slither, not the pinned version. Then:

1. Evaluate if the detector is catching a real issue or a false positive.
2. If the issue is real, obviously fix it
3. If it's a false positive, ignore it more narrowly so that we can catch future valid reentrancy-balance issues.