AggLayer: unify how we enforce the consumer of `CLAIM` note

[mmagician]

Currently we encode the target_faucet_account_id in NoteStorage and the script checks that consuming_account == target_faucet_account_id.
With note attachments (specifically NetworkAccountTarget`), we should enforce this via:

exec.network_account_target::active_account_matches_target_account
assert.err=ERR_B2AGG_TARGET_ACCOUNT_MISMATCH

see also related checks in #2450 (comment)

[mmagician]

closed in #2480