ubusd: simplify/fix avl loop in ubusd_reply_add()