fix(audit): lt

[ratankaliani]

Correctly constrain lt. Previously, if the RHS of lt was 0, the subtraction would cause the RHS to wrap around to become the largest value, which would cause lt & gt to return the wrong value.

Switch lt to instead use lte, as lt(a,b) = !lte(b, a).

Base: tamir/audit_fixes.