Fix code scanning alert - Calls inside a loop in distributeRoyalties

[zajck]

Tracking issue for:

• https://github.com/bosonprotocol/boson-protocol-contracts/security/code-scanning/1270

The issue happens if there are too many royalty recipients once a sequential commit is finalized, since the caller cannot control the input to distributeRoyalties.

Issue is not present for normal funds withdrawal, since the caller controls how many tokens are withdrawn in a single transaction.