fix(commitment-lock): reject type script on CKB successor

[quake]

Summary

• Reject CKB successor outputs with an unexpected type script using the existing OutputTypeError.
• Add a CKB VM regression that signs a settlement creating a correctly locked and funded successor with an extra, valid type script; it must be rejected.

Verification

• Regression fails before the contract change and passes after rebuilding the RISC-V contract.
• cargo test (19 integration tests passed)
• cargo fmt --all -- --check
• cargo clippy --all-targets -- -D warnings

Note: the top-level targeted make build command builds and copies commitment-lock, then fails because it also attempts to build a non-existent commitment-lock-sim package. The rebuilt binary was used by the VM tests.