lift finality pin to first validateer

[brenzi]

for simple debugging, we only finalize blocks from the first validateer in shard_status. This is not resilient and must be removed before production deployment