transfer
fun transfer(group: GroupId, from: ReplicaId, to: ReplicaId, amount: Long): Patch<EntitlementLedger>?
Move amount of holdings at group from peer from to peer to — same lineage, different pocket (design §4.3, verbatim BoundedCounter.transfer). null if from's holdings at group are insufficient. Appends to from's own transfer row.