Add g16.verify Groth16 verifier builtin

[elldeeone]

Summary

Adds g16.verify(...) as the low-level SilverScript intrinsic for verifying Groth16 proofs through the Rusty Kaspa ZK precompile.

The builtin signature is:

g16.verify(byte[] verifyingKey, byte[] proof, byte[32] ...publicInputs)

This PR now builds on merged #137 and reuses its qualified builtin, parser, compiler, and tree-sitter patterns.

This PR includes:

• parser, AST, formatter, and syntax-highlighting support for g16.verify
• static validation for byte[] verifying key/proof arguments and variadic byte[32] public inputs
• compiler lowering to OpZkPrecompile with ZkTag::Groth16 using the Rusty Kaspa stack convention
• void statement semantics: verification failure aborts script execution and the success value is discarded
• documentation, an executable example, valid/tampered proof coverage, and debugger support for post-Toccata-sized runtime parameters

Scope

This is the raw Groth16 intrinsic discussed in #137. It intentionally leaves the merged r0.* verifier behavior unchanged.

The possibility of implementing r0.g16.verify(...) as a SilverScript standard function on top of this intrinsic can be evaluated separately, including the cross-path R0 fixture test suggested in the #137 discussion.

Tests

cargo test --workspace
cargo clippy --workspace --tests --benches --examples -- -D warnings
cargo test --manifest-path tree-sitter/Cargo.toml
(cd tree-sitter && npm test)
cargo fmt --all -- --check
git diff --check upstream/master...HEAD

[elldeeone]

I missed that #137 was already the ZK base.

I’m going to move this to draft for now and restack it on top of #137 once that lands, so g16.verify can reuse the qualified builtin/parser/compiler shape from the R0 support work instead of duplicating that machinery.

[elldeeone]

Restacked on merged #137 and refreshed the description to match the current diff.

The PR now adds the raw g16.verify(...) intrinsic using the compiler patterns from #137; existing r0.* behaviour remains unchanged.

[someone235]

Remove the require, g16.verify has to be void

[elldeeone]

Fixed g16.verify is now void and drops the success value. Rebased on current master and all checks pass.

[someone235]

Can you add a comment of something like

"g16.verify requires special treatment since it has variable amount of arguments"