* op-challenger: Restrict the safe head in output provider BlockNumber instead of OutputRootProvider

This ensures the restriction is applied both to fetching output roots, and identifying the L2 block number the agreed output root comes from. The disputed block number remains restricted only by the claimed block number.

* go mod tidy cannon examples.

* op-e2e: Add test that proposals for future blocks are invalidated