Ballast: freezing a test dollar on Portaldot when its reserve runs short

Native Assets pallet roles, multisig thresholds and a reserve bot that only signs when finalized reserves cover supply.