A reported $19.4 million Bitcoin transfer tied to North Korea hackers has revived Lazarus risk concerns. Here is what is confirmed, what is not, and why it matters.