Airlock: a veto window for your POT, built on Portaldot's Proxy pallet

A leaked hot key should not empty a wallet in one block. Airlock uses the Proxy pallet's announce, delay and reject, with no smart contract.