Reserved-fund theft via full dispute-path escrow drain

Business logic error in 1Hive Gardens v2 through dfba919e218e20d52db9f7b2e8d292d45a46c91b allows remote attackers to receive reserved escrow funds. CVDisputeFacet._handleStreamingResolution clears the dispute flag and invokes StreamingEscrow.drainToBeneficiary, whose _drainTo transfers the entire token balance instead of retaining depositAmount() for the active stream. Exploitation requires an attacker-controlled beneficiary, an active streaming proposal, a dispute resolved as approved or default-approved, and escrow replenishment; the loss is bounded by the maintained deposit and buffer, not the full pool.