Remove payment logic from core contract

[rmeissner]

Currently the payment logic is an essential part of the core contract. It should be possible to extract this into a lib that can be used via a delegate call.

Initially this has not been done, since the signature validation influenced the payment (which has been changed) and to safe gas (which would be around 1k which is around 2% in a normal safe tx and therefore not super relevant right now)