conflux: Safeguards against staying on the same leg for "too long"

There are currently no safeguards to prevent us from staying on the same leg for "too long". Perhaps we should design should_update_primary_leg() such that it forces us to switch legs periodically, to prevent the seqno delta from getting too big?