Explicit overflow behavior

[killercup]

We can use #![deny(clippy::integer_arithmetic)] to make all overflow handling explicit.

• [ ] add lints to generated code
• [ ] return errors on overflow or decide why not
• [x] add lints to library code