LMPVaultRouterBase.mint/LMPVaultRouterBase.deposit has incorrect handling of Ether transfers

Absence of updating of debt reporting before the withdrawal/redemption can lead to destination shares/rewards getting stuck

An attacker can monitor `LiquidationRow.liquidateVaultsForToken()` function, then use flash loan to steal all rewards from users

LMPVault.redeem function lacks a check to ensure the amount of assets being redeemed is not less than the expected amount

`LMPVault._withdraw()` can revert due to an arithmetic underflow