Instant channels enable safe Lightning payments with unconfirmed funding