Add `require_confirmed_inputs` to RBF messages

[t-bast]

This was missing from the spec, but is more flexible and clearer than inheriting values from the previous attempt. We don't really support checking that flag yet, but we should ensure our codecs support reading it.